Dangerous Method Denial-of-Service Vulnerability in Voltronic Power ViewPower Monitor
CVE-2023-51578

7.5HIGH

Key Information:

Vendor

Voltronic Power

Status
VieWPower
Vendor
CVE Published:
3 May 2024

What is CVE-2023-51578?

The vulnerability within the MonitorConsole class of Voltronic Power's ViewPower provides an opportunity for remote attackers to induce a denial-of-service condition. This flaw arises from the exposure of a dangerous method that can be exploited without requiring authentication. As a result, systems running affected versions of ViewPower become susceptible to disruptions, jeopardizing the operational integrity of affected installations.

Affected Version(s)

ViewPower 1.04.21353

References

https://www.zerodayinitiative.com/advisories/ZDI-23-1884/
x_research-advisory

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.