Viewpower vulnerabilities

21 known vulnerabilities in Viewpower from Voltronicpower. 21 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ViewPower Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-51595May 3, 2024Voltronic PowerEPSS 48.2%

  Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required

• 9.8 Critical severity

  ViewPower Pro: Improper Neutralization of Special Elements used in an Expression Language Statement

  CVE-2023-51593May 3, 2024Voltronic PowerEPSS 1.6%

  Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to

• 7.5 High severity

  ViewPower Pro: Improper Restriction of XML External Entity Reference

  CVE-2023-51591May 3, 2024Voltronic PowerEPSS 1.11%

  Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authenticatio

• 9.8 Critical severity

  ViewPower Pro: Unrestricted Upload of File with Dangerous Type

  CVE-2023-51590May 3, 2024Voltronic PowerEPSS 1.48%

  Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not requ

• 7.8 High severity

  ViewPower Pro: Use of Hard-coded Credentials

  CVE-2023-51588May 3, 2024Voltronic Power

  Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obta

• 7.5 High severity

  ViewPower: Missing Authentication for Critical Functionality

  CVE-2023-51587May 3, 2024Voltronic PowerEPSS 36%

  Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not

• 9.8 Critical severity

  ViewPower Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-51586May 3, 2024Voltronic PowerEPSS 1.33%

  Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required t

• 8.8 High severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51584May 3, 2024Voltronic PowerEPSS 1.13%

  Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is requ

• 9.8 Critical severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51583May 3, 2024Voltronic PowerEPSS 1.48%

  Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to

• 9.8 Critical severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51582May 3, 2024Voltronic PowerEPSS 1.48%

  Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not requi

• 9.8 Critical severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51581May 3, 2024Voltronic PowerEPSS 1.48%

  Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not require

• 7.8 High severity

  ViewPower: Incorrect Permission Assignment for Critical Resource

  CVE-2023-51579May 3, 2024Voltronic Power

  Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the abili

• 7.5 High severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51578May 3, 2024Voltronic PowerEPSS 1.28%

  Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower. Authentication is not

• 7.8 High severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51577May 3, 2024Voltronic Power

  Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the

• 9.8 Critical severity

  ViewPower: Deserialization of Untrusted Data

  CVE-2023-51576May 3, 2024Voltronic PowerEPSS 1.55%

  Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to expl

• 9.8 Critical severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51575May 3, 2024Voltronic PowerEPSS 1.48%

  Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required t

• 9.8 Critical severity

  ViewPower: Exposed Dangerous Method or Function

  CVE-2023-51574May 3, 2024Voltronic PowerEPSS 1.55%

  Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not requ

• 9.8 Critical severity

  ViewPower Pro: Exposed Dangerous Method or Function

  CVE-2023-51573Apr 1, 2024Voltronic PowerEPSS 45.7%

  Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication i

• 9.8 Critical severity

  ViewPower Pro: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-51572Apr 1, 2024Voltronic PowerEPSS 38.4%

  Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not requir

• 7.5 High severity

  ViewPower Pro: Missing Authentication for Critical Functionality

  CVE-2023-51571Apr 1, 2024Voltronic Power

  Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is

• 9.8 Critical severity

  ViewPower Pro: Deserialization of Untrusted Data

  CVE-2023-51570Apr 1, 2024Voltronic PowerEPSS 1.04%

  Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required