Approved changes feed: RSS · Atom
cpe:2.3:a:voltronicpower:viewpower:1.04.21353:*:*:*:*:*:*:*
part: a version: 1.04.21353 update: *
| Vendor | Voltronicpower (70f076c2-fc23-5507-88d8-331681e63610) |
|---|---|
| Product | Viewpower (c3ea08b2-9b69-5c8c-af02-a0816b0e1450) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51595 |
vulnerable | 2026-06-08 06:17:53.574935 |
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability
CRITICAL (9.8)
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the selectDeviceListBy method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-22163.
Published: 2024-05-03T02:15:23.817Z
Updated: 2024-08-02T22:40:34.084Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51587 |
vulnerable | 2026-06-08 06:17:53.570610 |
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability
HIGH (7.5)
Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the getModbusPassword method. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-22073.
Published: 2024-05-03T02:15:17.846Z
Updated: 2024-08-02T22:40:34.098Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51584 |
vulnerable | 2026-06-08 06:17:53.565998 |
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability
HIGH (8.8)
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in that an administrator must trigger a shutdown operation.
The specific flaw exists within the shutdown method. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22065.
Published: 2024-05-03T02:15:15.629Z
Updated: 2024-08-02T22:40:34.090Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51583 |
vulnerable | 2026-06-08 06:17:53.565452 |
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability
CRITICAL (9.8)
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the UpsScheduler class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-22036.
Published: 2024-05-03T02:15:14.835Z
Updated: 2024-08-02T22:40:33.769Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51582 |
vulnerable | 2026-06-08 06:17:53.564723 |
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
CRITICAL (9.8)
Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the LinuxMonitorConsole class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22035.
Published: 2024-05-03T02:15:13.956Z
Updated: 2024-08-02T22:40:33.758Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51581 |
vulnerable | 2026-06-08 06:17:53.564326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51579 |
vulnerable | 2026-06-08 06:17:53.557547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51578 |
vulnerable | 2026-06-08 06:17:53.557048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51577 |
vulnerable | 2026-06-08 06:17:53.556586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51576 |
vulnerable | 2026-06-08 06:17:53.555845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51575 |
vulnerable | 2026-06-08 06:17:53.555329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51574 |
vulnerable | 2026-06-08 06:17:53.552234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51570 |
vulnerable | 2026-06-08 06:17:53.545807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.