CVE-2024-31856

8.8HIGH

An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL syntax, writing arbitrary files to the sy

发布于: 5/15/2024更新于: 7/30/2025
在NVD查看在MITRE查看

描述

An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL syntax, writing arbitrary files to the system, and executing remote code.

AI分析AI驱动

受影响产品

cyberpowerpowerpanel

参考资料