CVEvulnerability
CVE-2024-32047
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-489
Description
Hard-coded credentials for the
CyberPower PowerPanel test server can be found in the
production code. This might result in an attacker gaining access to the
testing or production server.
Affected configurations
• cyberpower powerpanel (<= 4.9.0)
Related
Weakness · CWE (1)
- CWE-489 Active Debug Code weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads Product
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads Product