Voltronicpower vulnerabilities

We track 22 vulnerabilities in Voltronicpower products across 3 products. 22 are rated high or critical, and none are known to be exploited. The most recent was published on May 3, 2024.

22vulnerabilities

14critical

8high

0exploited

9.1average CVSS score

Latest Voltronicpower vulnerabilities

9.8 Critical severity
ViewPower Pro: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-51595May 3, 2024Voltronic PowerEPSS 48.2%
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required
9.8 Critical severity
ViewPower Pro: Improper Neutralization of Special Elements used in an Expression Language Statement
CVE-2023-51593May 3, 2024Voltronic PowerEPSS 1.6%
Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to
7.5 High severity
ViewPower Pro: Improper Restriction of XML External Entity Reference
CVE-2023-51591May 3, 2024Voltronic PowerEPSS 1.11%
Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authenticatio
9.8 Critical severity
ViewPower Pro: Unrestricted Upload of File with Dangerous Type
CVE-2023-51590May 3, 2024Voltronic PowerEPSS 1.48%
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not requ
7.8 High severity
ViewPower Pro: Use of Hard-coded Credentials
CVE-2023-51588May 3, 2024Voltronic Power
Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obta
7.5 High severity
ViewPower: Missing Authentication for Critical Functionality
CVE-2023-51587May 3, 2024Voltronic PowerEPSS 36%
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not
9.8 Critical severity
ViewPower Pro: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-51586May 3, 2024Voltronic PowerEPSS 1.33%
Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required t
8.8 High severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51584May 3, 2024Voltronic PowerEPSS 1.13%
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is requ
9.8 Critical severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51583May 3, 2024Voltronic PowerEPSS 1.48%
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to
9.8 Critical severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51582May 3, 2024Voltronic PowerEPSS 1.48%
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not requi
9.8 Critical severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51581May 3, 2024Voltronic PowerEPSS 1.48%
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not require
7.8 High severity
ViewPower: Incorrect Permission Assignment for Critical Resource
CVE-2023-51579May 3, 2024Voltronic Power
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the abili
7.5 High severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51578May 3, 2024Voltronic PowerEPSS 1.28%
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower. Authentication is not
7.8 High severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51577May 3, 2024Voltronic Power
Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the
9.8 Critical severity
ViewPower: Deserialization of Untrusted Data
CVE-2023-51576May 3, 2024Voltronic PowerEPSS 1.55%
Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to expl
9.8 Critical severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51575May 3, 2024Voltronic PowerEPSS 1.48%
Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required t
9.8 Critical severity
ViewPower: Exposed Dangerous Method or Function
CVE-2023-51574May 3, 2024Voltronic PowerEPSS 1.55%
Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not requ
9.8 Critical severity
ViewPower Pro: Exposed Dangerous Method or Function
CVE-2023-51573Apr 1, 2024Voltronic PowerEPSS 45.7%
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication i
9.8 Critical severity
ViewPower Pro: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-51572Apr 1, 2024Voltronic PowerEPSS 38.4%
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not requir
7.5 High severity
ViewPower Pro: Missing Authentication for Critical Functionality
CVE-2023-51571Apr 1, 2024Voltronic Power
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is
9.8 Critical severity
ViewPower Pro: Deserialization of Untrusted Data
CVE-2023-51570Apr 1, 2024Voltronic PowerEPSS 1.04%
Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required
9.8 Critical severity
Snmp Web Pro: Improper Authentication
CVE-2023-33274Jul 12, 2023VoltronicpowerEPSS 1.06%
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a l