9.8

CVE-2024-32047

CyberPower PowerPanel business Active Debug Code

Hard-coded credentials for the 
CyberPower PowerPanel test server can be found in the 
production code. This might result in an attacker gaining access to the 
testing or production server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyberpower ≫ Powerpanel SwEditionbusiness SwPlatformwindows Version <= 4.9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.395
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
DHS.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-489 Active Debug Code

The product is released with debugging code still enabled or active.

https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
Product
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01
Third Party Advisory
US Government Resource