CVE-2024-31409CWE-863

CyberPower PowerPanel business Incorrect Authorization

Medium · published May 15, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Certain MQTT wildcards are not blocked on the

CyberPower PowerPanel

system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-05-15T20:00Z
EPSS history
Timeline
  • 15 MAY 20:00Z
    CyberPower PowerPanel business Incorrect Authorization
    cvelistv5