CVE-2023-51579— Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-51579
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22025.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
关键资源的不正确权限授予
Source: NVD (National Vulnerability Database)
Vulnerability Title
Voltronic Power ViewPower 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Voltronic Power ViewPower是Voltronic Power公司的一款适用于太阳能逆变器的监控和管理软件。 Voltronic Power ViewPower 存在安全漏洞，该漏洞源于产品安装程序中存在特定缺陷，允许攻击者提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Voltronic Power | ViewPower | 1.04.21353 | - |
II. Public POCs for CVE-2023-51579
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-51579
请登录查看更多情报信息。
Same Patch Batch · Voltronic Power · 2024-05-03 · 18 CVEs total
| CVE-2023-51593 | Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerab | |
| CVE-2023-51581 | Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution | |
| CVE-2023-51585 | Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulne | |
| CVE-2023-51590 | Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution | |
| CVE-2023-51591 | Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclo | |
| CVE-2023-51578 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulner | |
| CVE-2023-51584 | Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Executio | |
| CVE-2023-51582 | Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Executi | |
| CVE-2023-51576 | Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerab | |
| CVE-2023-51586 | Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulner | |
| CVE-2023-51574 | Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication By | |
| CVE-2023-51587 | Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure | |
| CVE-2023-51575 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vu | |
| CVE-2023-51595 | Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulne | |
| CVE-2023-51583 | Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vuln | |
| CVE-2023-51588 | Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalati | |
| CVE-2023-51577 | Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation |
IV. Related Vulnerabilities
Same product: ViewPower
- CVE-2023-51587
Voltronic Power ViewPower getModbusPassword Missing Authenti - CVE-2023-51585
Voltronic Power ViewPower USBCommEx shutdown Command Injecti - CVE-2023-51584
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangero - CVE-2023-51583
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Met - CVE-2023-51582
Voltronic Power ViewPower LinuxMonitorConsole Exposed Danger
Same vendor: Voltronic Power
- CVE-2026-22199
Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.c - CVE-2026-22192
Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via l - CVE-2023-51595
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injecti - CVE-2023-51593
Voltronic Power ViewPower Pro Expression Language Injection - CVE-2023-51591
Voltronic Power ViewPower Pro doDocument XML External Entity
Same weakness: CWE-732
- CVE-2026-41288
WatchGuard Agent on Windows Privilege Escalation Vulnerabili - CVE-2026-41686
Claude SDK for TypeScript has Insecure Default File Permissi - CVE-2026-6499
ILM Informatique OpenConcerto 安全漏洞 - CVE-2026-41366
OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLo - CVE-2026-35367
uutils coreutils nohup Information Disclosure via Insecure D
V. Comments for CVE-2023-51579
No comments yet