CVE-2024-32047

Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01	Third Party Advisory US Government Resource
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads	Product
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01	Third Party Advisory US Government Resource
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:windows:*:*

History

30 Jul 2025, 00:16

Type	Values Removed	Values Added
First Time		Cyberpower Cyberpower powerpanel
References	~~() https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 -~~	() https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - Third Party Advisory, US Government Resource
References	~~() https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads -~~	() https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads - Product
CPE		cpe:2.3:a:cyberpower:powerpanel:::::business:windows::

Information

Published : 2024-05-15 20:15

Updated : 2025-07-30 00:16

NVD link : CVE-2024-32047

Mitre link : CVE-2024-32047

CVE.ORG link : CVE-2024-32047

JSON object : View

Products Affected

cyberpower

powerpanel

CWE

CWE-489

Active Debug Code

{"id": "CVE-2024-32047", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-15T20:15:12.197", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads", "tags": ["Product"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-489"}]}], "descriptions": [{"lang": "en", "value": "Hard-coded credentials for the \nCyberPower PowerPanel test server can be found in the \nproduction code. This might result in an attacker gaining access to the \ntesting or production server."}, {"lang": "es", "value": "Las credenciales codificadas para el servidor de prueba CyberPower PowerPanel se pueden encontrar en el c\u00f3digo de producci\u00f3n. Esto podr\u00eda provocar que un atacante obtenga acceso al servidor de prueba o de producci\u00f3n."}], "lastModified": "2025-07-30T00:16:34.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cyberpower:powerpanel:*:*:*:*:business:windows:*:*", "vulnerable": true, "matchCriteriaId": "63016483-EF5A-42FE-BBC2-D7E66C24B9B1", "versionEndIncluding": "4.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}