CVE-2024-32053: critical vulnerability in CyberPower PowerPanel business
CyberPower PowerPanel business Use of Hard-coded Credentials
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.5%
Hard-coded credentials are used by the
CyberPower PowerPanel
platform to authenticate to the
database, other services, and the cloud. This could result in an
attacker gaining access to services with the privileges of a Powerpanel
business application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
CyberPower · PowerPanel businessRelated CVEs — CyberPower PowerPanel business
In the same product, most dangerous first.
CVE-2024-33615HIGHCyberPower PowerPanel business Relative Path TraversalEPSS 0.7%CVE-2024-34025CRITICALCyberPower PowerPanel business Use of Hard-coded PasswordEPSS 0.6%CVE-2024-31856HIGHCyberPower PowerPanel business SQL InjectionEPSS 0.5%CVE-2024-33625CRITICALCyberPower PowerPanel business Use of Hard-coded PasswordEPSS 0.5%CVE-2024-32047CRITICALCyberPower PowerPanel business Active Debug CodeEPSS 0.5%CVE-2024-32042MEDIUMCyberPower PowerPanel business Storing Passwords in a Recoverable FormatEPSS 0.4%