Critical · published August 22, 2025
🚨 A remote attacker can execute arbitrary code through Voltronic Power's web interface without any authentication whatsoever! That's right, no password required! 🔥 Think of it like an unattended power plant control room where anyone can just stroll in and pull the levers without anyone batting an eye — utter chaos waiting to happen! An attacker can take complete control of the system, potentially disrupting power management operations, manipulating settings, or even causing catastrophic failures. This could lead to a loss of functionality for critical power systems, which would be absolutely devastating!
Think of it like an unattended power plant control room where anyone can just stroll in and pull the levers without anyone batting an eye — utter chaos waiting to happen! CVE-2022-31491 stems from an unspecified flaw in the web interface of Voltronic Power's ViewPower and PowerShield products, allowing unauthenticated access to execute arbitrary code regardless of the UPS state.
An attacker can take complete control of the system, potentially disrupting power management operations, manipulating settings, or even causing catastrophic failures. This could lead to a loss of functionality for critical power systems, which would be absolutely devastating! Immediate action is essential! Update affected products to the latest versions: ViewPower to above 1.04-24215, ViewPower Pro to above 2.0-22165, and PowerShield Netguard to above 1.04-23292. Don't wait – secure those systems now! You’ve got this! Follow these steps to lock down your power systems and keep them safe! 🛡️