CVE-2024-11322CWE-287

CyberPower PowerPanel Business Unauthenticated Restart DoS

High · published January 15, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability exists in CyberPower PowerPanel Business (PPB) 4.11.0.

An unauthenticated remote attacker can restart the ppbd.exe process via the PowerPanel Business Service Watchdog service listening on TCP port 2003. The attacker can repeatedly restart ppbd.exe to render it unavailable.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00647 · 50.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-01-15T14:03Z
EPSS history
Timeline
  • 15 JAN 14:03Z
    CyberPower PowerPanel Business Unauthenticated Restart DoS
    cvelistv5