Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-31409 EUVD-2024-34450GHSA-cjwm-89qw-9q6v

CyberPower PowerPanel business Incorrect Authorization

Published May 15, 2024 · Updated Aug 7, 2025 · Assigned by icscert

Description

Certain MQTT wildcards are not blocked on the
CyberPower PowerPanel

system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Affected products

VendorProductAffectedFixed
CyberPower PowerPanel business < 4.9.0 4.9.0

Advisories 1

References