Skip to content
OpenAdvisories
Critical ICSA-24-023-03 4 CVEs

Voltronic Power ViewPower Pro

Published Jan 23, 2024 · Updated Jan 23, 2024

Vendor: Voltronic Power Product: ViewPower Pro

Summary

Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, obtain administrator credentials, or achieve remote code execution.

Vulnerabilities 4

  • Critical 9.8
    CVE-2023-51570

    Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not require…

    Voltronic Power ViewPower Pro
  • Critical 9.8
    CVE-2023-51572 EPSS 38%

    Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability

    Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not requi…

    Voltronic Power ViewPower Pro
  • Critical 9.8
    CVE-2023-51573 EPSS 46%

    Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

    Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication …

    Voltronic Power ViewPower Pro
  • High 7.5
    CVE-2023-51571

    Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

    Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication i…

    Voltronic Power ViewPower Pro

Revision history

  1. #1

    Initial Publication

References