VULNERABILITY INTELLIGENCE

CVE-2024-31856

CVSS score8.8 HIGH
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-05-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This could result in an attacker injecting SQL syntax, writing arbitrary files to the system, and executing remote code.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-89

Primary references