Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

22 records

Priority HIGH 79

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.48168 Published 2024-05-03 No fix listed CWE-89
Priority MEDIUM 52

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01483 Published 2024-05-03 No fix listed CWE-434
Priority LOW 36

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2024-05-03 No fix listed CWE-798
Priority HIGH 65

Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.36038 Published 2024-05-03 No fix listed CWE-306
Priority MEDIUM 52

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01331 Published 2024-05-03 No fix listed CWE-89
Priority MEDIUM 43

Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01396 Published 2024-05-03 No fix listed CWE-78
Priority HIGH 76

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38423 Published 2024-04-01 No fix listed CWE-78
Priority MEDIUM 40

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00667 Published 2024-04-01 No fix listed CWE-306