Viewpower Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:voltronicpower:viewpower_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Voltronicpower (70f076c2-fc23-5507-88d8-331681e63610) |
|---|---|
| Product | Viewpower Pro (9b85fdc2-52f4-5947-b923-f963baba746a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51572 |
vulnerable | 2026-06-08 06:17:53.549093 |
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability
CRITICAL (9.8)
Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the getMacAddressByIP function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21163.
Published: 2024-04-01T21:18:11.318Z
Updated: 2024-08-27T15:39:48.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51571 |
vulnerable | 2026-06-08 06:17:53.548496 |
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability
HIGH (7.5)
Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SocketService module, which listens on UDP port 41222 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-21162.
Published: 2024-04-01T21:17:40.851Z
Updated: 2024-08-27T15:33:37.184Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.