CVE-2024-31410
EUVD-2024-3445115.05.2024, 20:15
The devices which CyberPower PowerPanel manages use identical certificates based on a hard-coded cryptographic key. This can allow an attacker to impersonate any client in the system and send malicious data.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cyberpower | powerpanel | 𝑥 ≤ 4.9.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| cyberpower | powerpanel_business | 𝑥 < 4.9.0 | ADP |
Common Weakness Enumeration
References