Description
Hard-coded credentials are used by the CyberPower PowerPanel
platform to authenticate to the database, other services, and the cloud. This could result in an attacker gaining access to services with the privileges of a Powerpanel business application.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| CyberPower | PowerPanel business | < 4.9.0 |
| cyberpower | powerpanel_business | < 4.9.0 |
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloadsProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01Third Party Advisory, US Government Resource
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloadsProduct
Timeline
- Published
- May 15, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed