Priority HIGH 81
Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01317 · Published 2026-09-04 · No fix listed CWE-434
Priority HIGH 77
Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by sup…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01036 · Published 2026-03-13 · No fix listed CWE-22
Priority LOW 38
Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00286 · Published 2026-03-13 · No fix listed CWE-306
Priority HIGH 79
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.48168 · Published 2024-05-03 · No fix listed CWE-89
Priority MEDIUM 52
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01603 · Published 2024-05-03 · No fix listed CWE-917
Priority MEDIUM 41
Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01108 · Published 2024-05-03 · No fix listed CWE-611
Priority MEDIUM 52
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-434
Priority LOW 36
Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-03 · No fix listed CWE-798
Priority HIGH 65
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.36038 · Published 2024-05-03 · No fix listed CWE-306
Priority MEDIUM 52
Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01331 · Published 2024-05-03 · No fix listed CWE-89
Priority MEDIUM 43
Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01396 · Published 2024-05-03 · No fix listed CWE-78
Priority MEDIUM 42
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01127 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority LOW 36
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00234 · Published 2024-05-03 · No fix listed CWE-732
Priority MEDIUM 41
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01283 · Published 2024-05-03 · No fix listed CWE-749
Priority LOW 36
Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0031 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01549 · Published 2024-05-03 · No fix listed CWE-502
Priority MEDIUM 52
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2024-05-03 · No fix listed CWE-749
Priority MEDIUM 52
Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01553 · Published 2024-05-03 · No fix listed CWE-749
Priority HIGH 78
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.45744 · Published 2024-04-01 · No fix listed CWE-749
Priority HIGH 76
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.38423 · Published 2024-04-01 · No fix listed CWE-78
Priority MEDIUM 40
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00667 · Published 2024-04-01 · No fix listed CWE-306
Priority MEDIUM 51
Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0104 · Published 2024-04-01 · No fix listed CWE-502
Load more
THREATIST.IORead the docs