CVE-2024-32047

CyberPower PowerPanel business Active Debug Code

State
Published
Severity
9.8 Critical
Published
May 15, 2024
Updated
Aug 2, 2024
Reserved
Apr 29, 2024

Read the record on cve.org

Description

Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hicscert

Weaknesses

Affected Products

ProductVersions
PowerPanel businessCyberPower
  • before 4.9.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.