Description
A specially crafted Zip file containing path traversal characters can be
imported to the
CyberPower PowerPanel
server, which allows file writing to the server outside
the intended scope, and could allow an attacker to achieve remote code
execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CyberPower | PowerPanel business | < 4.9.0 | 4.9.0 |
Advisories 1
- ICSA-24-123-01 CyberPower PowerPanel Business CISA ICS & IT advisories · Aug 7, 2025