Arbitrary Code Execution Vulnerability in Voltronic Power Products
CVE-2022-31491

10CRITICAL

Key Information:

Vendor

Voltronic Power

Status
ViewPower and PowerShield Netguard
Vendor
CVE Published:
22 August 2025

What is CVE-2022-31491?

A vulnerability in Voltronic Power's ViewPower and PowerShield Netguard products enables remote attackers to execute arbitrary code by exploiting an insecure web interface designed for detecting managed UPS shutdowns. This issue permits an unauthenticated individual to run malicious code without requiring any specific condition regarding the state or presence of a managed UPS.

References

https://www.ready2disclose.com/vpow-31491-43110/
https://www.cisa.gov/news-events/ics-advisories/icsa-25-1...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.