CyberSecBulletin

Powertekpdus vulnerabilities

We track 2 vulnerabilities in Powertekpdus products across 7 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2022.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Powertekpdus vulnerabilities

  • 9.8 Critical severity

    Basic Pdu Firmware: Incorrect Permission Assignment for Critical Resource

    CVE-2022-33175PowertekpdusEPSS 1.74%

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.token field that is accessible to everyone through the /cgi/get_param.cgi HTTP API. This leads to disclosing active session

  • 7.5 High severity

    Basic Pdu Firmware: Incorrect Authorization

    CVE-2022-33174PowertekpdusEPSS 14.1%

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.c