CVE-2024-32042: falha de média gravidade em CyberPower PowerPanel business
CyberPower PowerPanel business Storing Passwords in a Recoverable Format
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.9epss 0.4%
The key used to encrypt passwords stored in the database can be found in
the
CyberPower PowerPanel
application code, allowing the passwords to be recovered.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
CyberPower · PowerPanel businessCVEs relacionadas — CyberPower PowerPanel business
No mesmo produto, das mais perigosas para as menos.
CVE-2024-33615HIGHCyberPower PowerPanel business Relative Path TraversalEPSS 0.7%CVE-2024-34025CRITICALCyberPower PowerPanel business Use of Hard-coded PasswordEPSS 0.6%CVE-2024-31856HIGHCyberPower PowerPanel business SQL InjectionEPSS 0.5%CVE-2024-33625CRITICALCyberPower PowerPanel business Use of Hard-coded PasswordEPSS 0.5%CVE-2024-32047CRITICALCyberPower PowerPanel business Active Debug CodeEPSS 0.5%CVE-2024-32053CRITICALCyberPower PowerPanel business Use of Hard-coded CredentialsEPSS 0.5%