viewpower vulnerabilities and fixes

Recent CVEs affecting viewpower, with upgrade or downgrade steps. 22 tracked.

viewpower has 22 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-03. Highest priority: CVE-2023-51595 (score 64/100).

• CVE-2023-51595 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability
• CVE-2023-51593 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability
• CVE-2023-51591 HIGH 7.5 DOWNGRADE Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-51590 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability
• CVE-2023-51588 HIGH 7.8 DOWNGRADE Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability
• CVE-2023-51587 HIGH 7.5 DOWNGRADE Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability
• CVE-2023-51586 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability
• CVE-2023-51585 HIGH 8.8 DOWNGRADE Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability
• CVE-2023-51584 HIGH 8.8 DOWNGRADE Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability
• CVE-2023-51583 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability
• CVE-2023-51582 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
• CVE-2023-51581 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
• CVE-2023-51579 HIGH 7.8 DOWNGRADE Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability
• CVE-2023-51578 HIGH 7.5 DOWNGRADE Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability
• CVE-2023-51577 HIGH 7.8 DOWNGRADE Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability
• CVE-2023-51576 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2023-51575 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
• CVE-2023-51574 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability
• CVE-2023-51573 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerabi
• CVE-2023-51572 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability
• CVE-2023-51571 HIGH 7.5 DOWNGRADE Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability
• CVE-2023-51570 CRITICAL 9.8 DOWNGRADE Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability

FAQ

How do I fix viewpower vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is viewpower being exploited right now?

None of the tracked viewpower CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which viewpower CVE should I patch first?

CVE-2023-51595 currently ranks highest (64/100): Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability.

RSS feed for viewpower · ← Back to latest CVEs