Vulnerability Description
An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cyberpower | Powerpanel | < 2.8.3 |
Related Weaknesses (CWE)
References
- https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002Release Notes
- https://www.tenable.com/security/research/tra-2024-14Third Party Advisory
- https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002Release Notes
- https://www.tenable.com/security/research/tra-2024-14Third Party Advisory
FAQ
What is CVE-2024-32735?
CVE-2024-32735 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may ...
How severe is CVE-2024-32735?
CVE-2024-32735 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-32735?
Check the references section above for vendor advisories and patch information. Affected products include: Cyberpower Powerpanel.