Description
The devices which CyberPower PowerPanel manages use identical certificates based on a
hard-coded cryptographic key. This can allow an attacker to impersonate
any client in the system and send malicious data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CyberPower | PowerPanel business | < 4.9.0 | 4.9.0 |
Advisories 1
- ICSA-24-123-01 CyberPower PowerPanel Business CISA ICS & IT advisories · Aug 7, 2025