๐Ÿ” CVE Alert

CVE-2023-51581

CRITICAL 9.8

Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th

Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MacMonitorConsole class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22034.

CWE CWE-749
Vendor voltronic power
Product viewpower
Published May 3, 2024
Last Updated Aug 2, 2024
Stay Ahead of the Next One

Get instant alerts for voltronic power viewpower

Be the first to know when new critical vulnerabilities affecting voltronic power viewpower are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Versions

Voltronic Power / ViewPower
1.04.21353

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
zerodayinitiative.com: https://www.zerodayinitiative.com/advisories/ZDI-23-1886/