CVE-2021-30490

ALTO 7.8CVE-2021-30490 · Published 16/08/2022 · updated 17/06/2026

In breve

CVE-2021-30490 è una vulnerabilità ALTO (CVSS 7.8) che riguarda viewpower (power-software-download).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 22.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
viewpower power-software-download	`≥ 1.04-21012, ≤ 1.04-21353`	No fix yet

Description

upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.

References

0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html · Exploit
power-software-download.com/viewpower.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free