Path Traversal in Cyberpower Powerpanel Business
CVE-2024-33615
A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote c…
EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cyberpower Powerpanel Business — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-33615?
- CVE-2024-33615 is a high-severity vulnerability in Cyberpower Powerpanel Business, classified under Relative Path Traversal. CVSS score: 8.8/10. Published 2024-05-15.
- How severe is CVE-2024-33615?
- High severity. CVSS v3 base score is 8.8 out of 10.