ViewPower Remote Authentication Bypass Vulnerability

CVE-2023-51587

What is CVE-2023-51587?

The Voltronic Power ViewPower software is susceptible to a security risk in the getModbusPassword method, which allows unauthenticated remote attackers to disclose sensitive information. This vulnerability arises from the lack of authentication checks before granting access to critical functionality. By exploiting this flaw, an attacker can reveal stored credentials, potentially leading to further security breaches and unauthorized access to affected systems. To mitigate such risks, it's imperative for users to apply security patches and implement monitoring strategies.

References