CyberPower vulnerabilities
We track 22 vulnerabilities in CyberPower products across 7 products. 22 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2024.
Latest CyberPower vulnerabilities
- 9.8 Critical severity
PowerPanel business: Use of Hard-coded Password
CyberPower PowerPanel business application code contains a hard-coded set of authentication credentials. This could result in an attacker bypassing authentication and gaining administrator privileges.
- 9.8 Critical severity
PowerPanel business: Use of Hard-coded Password
CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication.
- 8.8 High severity
PowerPanel business: Relative Path Traversal
A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote code execution.
- 9.8 Critical severity
PowerPanel business: Use of Hard-coded Credentials
Hard-coded credentials are used by the CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud. This could result in an attacker gaining access to services with the privileges of a Powerpanel business application.
- 9.8 Critical severity
PowerPanel business: Active Debug Code
Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server.
- 7.5 High severity
PowerPanel business: Storing Passwords in a Recoverable Format
The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwords to be recovered.
- 8.8 High severity
PowerPanel business: Improper Neutralization of Special Elements used in an SQL Command
An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL syntax, writing arbitrary files to the system, and executing remote code.
- 7.5 High severity
PowerPanel business: Incorrect Authorization
Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.
- 7.5 High severity
CyberPower PowerPanel Enterprise: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_verbose" function within MCUDBHelper.
- 7.5 High severity
CyberPower PowerPanel Enterprise: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_lean" function within MCUDBHelper.
- 7.5 High severity
CyberPower PowerPanel Enterprise: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_contract_result" function within MCUDBHelper.
- 7.5 High severity
CyberPower PowerPanel Enterprise: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_utask_verbose" function within MCUDBHelper.
- 9.8 Critical severity
CyberPower PowerPanel Enterprise: Missing Authentication for Critical Functionality
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
- 8.8 High severity
PowerPanel Enterprise: Improper Neutralization of Special Elements used in an OS Command
When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerabilit
- 9.8 Critical severity
PowerPanel Enterprise: Improperly Implemented Security Check for Standard
A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to the Cypber
- 9.8 Critical severity
PowerPanel Enterprise: Improper Neutralization of Escape, Meta, or Control Sequences
An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user "cyberpower" by appending a non-printable character.An unauth
- 9.8 Critical severity
iBoot PDU: Use of Hard-coded Credentials
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database. A malicious agent with the ability to execute operating system commands on the device can leverage t
- 7.2 High severity
iBoot PDU: Improper Neutralization of Special Elements used in an OS Command
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions rely
- 8.8 High severity
iBoot PDU: Improper Neutralization of Special Elements used in an OS Command
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary command on the underlying Linux
- 9.8 Critical severity
PowerPanel Business Local / Remote: Improper Privilege Management
Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earli
- 9.8 Critical severity
PowerPanel Business Local / Remote: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bi
- 9.8 Critical severity
PowerPanel Business Local / Remote: Improper Authentication
Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Lo