Known vulnerabilities in PowerPanel

Vendor: CyberPower
Software: PowerPanel
Software CPE: cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:*:*:*:*
Website: https://www.cyberpower.com/global/en
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerPanel PowerPanel is affected by 8 known vulnerabilities: 3 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89130 - Improper Authorization
CVE-2024-31409		 CWE-285 Medium
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89129 - Use of Hard-coded Cryptographic Key
CVE-2024-31410		 CWE-321 Medium
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89128 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-31856		 CWE-89 Medium
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89127 - Storing Passwords in a Recoverable Format
CVE-2024-32042		 CWE-257 Low
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89123 - Active Debug Code
CVE-2024-32047		 CWE-489 High
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89122 - Use of Hard-coded Credentials
CVE-2024-32053		 CWE-798 High
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89121 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-33615		 CWE-22 Medium
No
No
 4.10.1 03.05.2024 SB2024050315
#VU89120 - Use of Hard-coded Password
CVE-2024-34025		 CWE-259 High
No
No
 4.10.1 03.05.2024 SB2024050315