CVE-2023-251319.4CriticalCWE-1393

CVE-2023-25131: Use of default password vulnerability in CyberPower PowerPanel Business

CyberPower · PowerPanel Business Local / Remote

Affected: CyberPower PowerPanel Business Local / Remote · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.0%probability of exploitation in the next 30 days

62nd percentile

050100

Higher than 62% of scored CVEs

9.4CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 64bit v4.8.6 and earlier, PowerPanel Business Management for Linux 32bit v4.8.6 and earlier, PowerPanel Business Management for Linux 64bit v4.8.6 and earlier, PowerPanel Business Local/Remote for MacOS v4.8.6 and earlier, and PowerPanel Business Management for MacOS v4.8.6 and earlier allows remote attackers to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the 'admin' password.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

CyberPower · PowerPanel Business Local / Remoteup to and including v4.8.6
CyberPower · PowerPanel Business Managementup to and including v4.8.6

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use of Default Password · Authentication
Vendor: CyberPower
Published: April 2023
Band: Unlikely (under 1%), April 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-25131 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.