CVE-2024-32042
CyberPower PowerPanel business Storing Passwords in a Recoverable Format
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
CyberPower PowerPanel business Storing Passwords in a Recoverable Format
| Assigner | icscert |
| Reserved | 2024-04-29 |
| Published | 2024-05-15 |
| Updated | 2024-08-02 |
The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, allowing the passwords to be recovered.
| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Amir Preminger and Noam Moshe of Claroty Team82 Research reported these vulnerabilities to CISA.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01
https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
