Advisories · Technology

Voltronic Power ViewPower Pro.

Every CVE that names Voltronic Power ViewPower Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-51595 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- SQL injection
Not analysed yet 3 May 2024
CVE-2023-51593 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- Code injection
Not analysed yet 3 May 2024
CVE-2023-51591 CVE record

CVSS 6.5 Medium

Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability
- Voltronic Power ViewPower Pro
- XML external entities (XXE)
Not analysed yet 3 May 2024
CVE-2023-51590 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- Unrestricted file upload
Not analysed yet 3 May 2024
CVE-2023-51588 CVE record

CVSS 7.8 High

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability
- Voltronic Power ViewPower Pro
- Hard-coded credentials
Not analysed yet 3 May 2024
CVE-2023-51586 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- SQL injection
Not analysed yet 3 May 2024
CVE-2023-51573 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability
- Voltronic Power ViewPower Pro
- CWE-749
Not analysed yet 1 Apr 2024
CVE-2023-51572 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- Command injection
Not analysed yet 1 Apr 2024
CVE-2023-51571 CVE record

CVSS 7.5 High

Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability
- Voltronic Power ViewPower Pro
- Authentication bypass
Not analysed yet 1 Apr 2024
CVE-2023-51570 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability
- Voltronic Power ViewPower Pro
- Insecure deserialization
Not analysed yet 1 Apr 2024