CVE-2023-25132

CRITICO 9.8CVE-2023-25132 · Published 24/04/2023 · updated 17/06/2026

In breve

CVE-2023-25132 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda powerpanel (cyberpower).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
powerpanel cyberpower	`≤ 4.8.6`	No fix yet

Description

Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to execute operation system commands via unspecified vectors.

References

cyberpower.com/global/en/product/sku/powerpanel_business_for_linux · Product
cyberpower.com/global/en/product/sku/powerpanel_business_for_mac · Product
cyberpower.com/global/en/product/sku/powerpanel_business_for_virtual_machine · Product
cyberpower.com/global/en/product/sku/powerpanel_business_for_windows · Product
zuso.ai/Advisory · Third Party Advisory

Altre vulnerabilità di powerpanel

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

powerpanel

cyberpower

≤ 4.8.6

No fix yet

Description

Altre vulnerabilità di powerpanel

Vedi tutto →