Read the docs

Voltronic Power

Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Voltronic Power records in CISA KEV

No Voltronic Power vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Viewpower 22 records HIGH Snmp Web Pro 3 records HIGH

Records

28 records

TI-2023-16437 CVE-2023-33274 · GHSA-xv8v-xmj4-3j83

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability…

Priority HIGH 82

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authoriza…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01057 Published 2023-07-12 No fix listed CWE-287
TI-2026-32347 CVE-2026-44402 · GHSA-wrcv-35wf-f64v

Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

Priority HIGH 81

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01317 Published 2026-09-04 No fix listed CWE-434
TI-2023-28247 CVE-2023-51595 · GHSA-3wx7-rcmj-m6wf

SQL injection in Voltronic Power ViewPower Pro

Priority HIGH 79

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.48168 Published 2024-05-03 No fix listed CWE-89
TI-2026-17809 CVE-2026-22199 · GHSA-qgvm-cj9x-53jj

Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.cgi

Priority HIGH 77

Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by sup…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01036 Published 2026-03-13 No fix listed CWE-22
TI-2023-28224 CVE-2023-51572 · GHSA-67f8-2vh7-p8ch

OS command injection in Voltronic Power ViewPower Pro

Priority HIGH 76

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38423 Published 2024-04-01 No fix listed CWE-78
TI-2023-28239 CVE-2023-51587 · GHSA-g29m-vq8m-35pg

Missing authentication in Voltronic Power ViewPower

Priority HIGH 65

Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.36038 Published 2024-05-03 No fix listed CWE-306
TI-2023-28242 CVE-2023-51590 · GHSA-783r-ph9j-56qg

Unrestricted file upload in Voltronic Power ViewPower Pro

Priority MEDIUM 52

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01483 Published 2024-05-03 No fix listed CWE-434
TI-2023-28238 CVE-2023-51586 · GHSA-648w-3fxx-c8v2

SQL injection in Voltronic Power ViewPower Pro

Priority MEDIUM 52

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01331 Published 2024-05-03 No fix listed CWE-89
TI-2023-28237 CVE-2023-51585 · GHSA-j553-rm7r-hfrp

OS command injection in Voltronic Power ViewPower

Priority MEDIUM 43

Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01396 Published 2024-05-03 No fix listed CWE-78
TI-2023-28223 CVE-2023-51571 · GHSA-5vqg-cq3h-mm9v

Missing authentication in Voltronic Power ViewPower Pro

Priority MEDIUM 40

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00667 Published 2024-04-01 No fix listed CWE-306
TI-2026-17802 CVE-2026-22192 · GHSA-3xw8-g6v7-h2gh

Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage

Priority LOW 38

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00286 Published 2026-03-13 No fix listed CWE-306
TI-2023-28240 CVE-2023-51588 · GHSA-g3vp-jcf8-4hmv

Hard-coded credentials in Voltronic Power ViewPower Pro

Priority LOW 36

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2024-05-03 No fix listed CWE-798
Load more
Open these records in search →