Priority HIGH 79
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.48168 · Published 2024-05-03 · No fix listed CWE-89
Priority HIGH 78
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.45744 · Published 2024-04-01 · No fix listed CWE-749
Priority HIGH 76
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.38423 · Published 2024-04-01 · No fix listed CWE-78
Priority HIGH 65
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.36038 · Published 2024-05-03 · No fix listed CWE-306
Priority MEDIUM 52
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01603 · Published 2024-05-03 · No fix listed CWE-917
Priority MEDIUM 52
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-434
Priority MEDIUM 52
Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01331 · Published 2024-05-03 · No fix listed CWE-89
Priority MEDIUM 52
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01549 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 52
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01553 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 51
Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0104 · Published 2024-04-01 · No fix listed CWE-502
Priority MEDIUM 43
Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01396 · Published 2024-05-03 · No fix listed CWE-78
Priority MEDIUM 42
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01127 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 41
Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01108 · Published 2024-05-03 · No fix listed CWE-611
Priority MEDIUM 41
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01283 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 40
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00667 · Published 2024-04-01 · No fix listed CWE-306
Priority LOW 36
Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-03 · No fix listed CWE-798
Priority LOW 36
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-03 · No fix listed CWE-732
Priority LOW 36
Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2024-05-03 · No fix listed CWE-749