Voltronic Power ViewPower Pro SocketService Missing Authentication Denial-of-Service Vulnerability

CVE-2023-51571

What is CVE-2023-51571?

The vulnerability involves a denial-of-service condition in the SocketService module of Voltronic Power's ViewPower Pro. This module, which defaults to listening on UDP port 41222, does not require authentication, allowing unauthorized attackers to exploit this flaw. By leveraging the lack of authentication, attackers can disrupt the normal operations of the system, leading to potential service outages. The absence of necessary security measures in this part of the software makes it particularly susceptible to remote exploitation.

References