CVEvulnerability
CVE-2024-32053
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-798
Description
Hard-coded credentials are used by the
CyberPower PowerPanel
platform to authenticate to the
database, other services, and the cloud. This could result in an
attacker gaining access to services with the privileges of a Powerpanel
business application.
Affected configurations
• cyberpower powerpanel (<= 4.9.0)
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads Product
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads Product