9.8

CVE-2023-25132

Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business

Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyberpower ≫ Powerpanel SwEdition business SwPlatform linux Version <= 4.8.6
Cyberpower ≫ Powerpanel SwEdition business SwPlatform macos Version <= 4.8.6
Cyberpower ≫ Powerpanel SwEdition business SwPlatform virtual_machine Version <= 4.8.6
Cyberpower ≫ Powerpanel SwEdition business SwPlatform windows Version <= 4.8.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.12% 0.619
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ART@zuso.ai 9.1 2.3 6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_linux#downloads
Product
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_mac#downloads
Product
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine#downloads
Product
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
Product
https://zuso.ai/Advisory/
Third Party Advisory