Beveiligingsadvies

CVE-2023-3265

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-08-14 04:08:06

Laatst bijgewerkt 2024-10-09 14:40:02

Toegewezen door trellix

CVSS-score 9.8

Status PUBLISHED

Beschrijving

An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application with the default user "cyberpower" by appending a non-printable character.An unauthenticated attacker can leverage this vulnerability to log in to the CypberPower PowerPanel Enterprise as an administrator with hardcoded default credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗