Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-31409

CyberPower PowerPanel business Incorrect Authorization

Description

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CyberPower PowerPanel business

Default version status: unaffected

  • 0 to < 4.9.0affected

References