CVE-2024-31409

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel

system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-31412.4A vulnerability has been found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This vulnerability affects unknown codCVE-2024-314106.5The devices which CyberPower PowerPanel manages use identical certificates based on a hard-coded cryptographic key. This can allow an attacCVE-2024-314118.8Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that CVE-2024-314127.8Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially craftedCVE-2024-314135.9Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD veCVE-2024-314146.1The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feCVE-2024-314158.1The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network manageCVE-2024-314166.5The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reporCVE-2024-314194.3An information disclosure flaw was found in OpenShift Virtualization. The DownwardMetrics feature was introduced to expose host metrics to vCVE-2024-31424.3A vulnerability was found in Clavister E10 and E80 up to 14.00.10 and classified as problematic. This issue affects some unknown processing CVE-2024-314206.5A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node withCVE-2024-314214.3Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a throu
CVE-2024-31409: High severity, CVSS 7.5 | Vulnix