Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-34025 EUVD-2024-34596GHSA-w664-f83j-wrqm

CyberPower PowerPanel business Use of Hard-coded Password

Published May 15, 2024 · Updated Aug 2, 2024 · Assigned by icscert

Description

CyberPower PowerPanel business application code contains a hard-coded set of authentication
credentials. This could result in an attacker bypassing authentication
and gaining administrator privileges.

Affected products

VendorProductAffectedFixed
CyberPower PowerPanel business < 4.9.0 4.9.0

Advisories 1

References