CVE-2024-31409

CVSS V2 None CVSS V3 None

Description

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Overview

CVE ID
CVE-2024-31409

Assigner
icscert

Vulnerability Status
PUBLISHED

Published Version
2024-05-15T20:00:22.532Z

Last Modified Date
2024-06-04T17:36:52.524Z

Weakness Enumerations

CWE	URL
CWE-285	http://cwe.mitre.org/data/definitions/285.html

References

Reference URL	Reference Tags
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-31409
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31409

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 22:32:18				Added to TrackCVE