CVE-2024-32735
Assigner: tenable
Published: 2024-05-09T14:54:45.407Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: CyberPower PowerPanel Enterprise
vendor: CyberPower
versions: lessThan: 2.8.3
status: affected
version: 0
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3.&nbsp;An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
value: An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
source: discovery: UNKNOWN
title: CyberPower PowerPanel Enterprise Missing Authentication
x_generator: engine: Vulnogram 0.1.0-dev