Description (CNA)
Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CyberPower / PowerPanel business | affected 0 before 4.9.0 |
CWE
CWE-863
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01
- https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.