CVE-2022-31491

CRITICAL

10.0

Description

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this to run arbitrary code immediately regardless of any managed UPS state or presence.

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published8/22/2025

Last Modified8/25/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-94CWE-749

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05(cve@mitre.org)

https://www.ready2disclose.com/vpow-31491-43110/(cve@mitre.org)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.