CVE-2024-33615CWE-23

CyberPower PowerPanel business Relative Path Traversal

High · published May 15, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

A specially crafted Zip file containing path traversal characters can be

imported to the

CyberPower PowerPanel

server, which allows file writing to the server outside

the intended scope, and could allow an attacker to achieve remote code

execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2024-05-15T19:23Z
EPSS history
Timeline
  • 15 MAY 19:23Z
    CyberPower PowerPanel business Relative Path Traversal
    cvelistv5