CVE-2023-51581— Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-51581
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MacMonitorConsole class. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22034.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
暴露危险的方法或函数
Source: NVD (National Vulnerability Database)
Vulnerability Title
Voltronic Power ViewPower 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Voltronic Power ViewPower是Voltronic Power公司的一款适用于太阳能逆变器的监控和管理软件。 Voltronic Power ViewPower 存在安全漏洞，该漏洞源于MacMonitorConsole 类中存在特定缺陷，允许攻击者执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Voltronic Power | ViewPower | 1.04.21353 | - |
II. Public POCs for CVE-2023-51581
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-51581
请登录查看更多情报信息。
Same Patch Batch · Voltronic Power · 2024-05-03 · 18 CVEs total
| CVE-2023-51574 | Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication By | |
| CVE-2023-51585 | Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulne | |
| CVE-2023-51590 | Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution | |
| CVE-2023-51591 | Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclo | |
| CVE-2023-51578 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulner | |
| CVE-2023-51584 | Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Executio | |
| CVE-2023-51582 | Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Executi | |
| CVE-2023-51576 | Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerab | |
| CVE-2023-51593 | Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerab | |
| CVE-2023-51586 | Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulner | |
| CVE-2023-51587 | Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure | |
| CVE-2023-51575 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vu | |
| CVE-2023-51595 | Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulne | |
| CVE-2023-51583 | Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vuln | |
| CVE-2023-51588 | Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalati | |
| CVE-2023-51577 | Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation | |
| CVE-2023-51579 | Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulne |
IV. Related Vulnerabilities
Same product: ViewPower
- CVE-2023-51587
Voltronic Power ViewPower getModbusPassword Missing Authenti - CVE-2023-51585
Voltronic Power ViewPower USBCommEx shutdown Command Injecti - CVE-2023-51584
Voltronic Power ViewPower USBCommEx shutdown Exposed Dangero - CVE-2023-51583
Voltronic Power ViewPower UpsScheduler Exposed Dangerous Met - CVE-2023-51582
Voltronic Power ViewPower LinuxMonitorConsole Exposed Danger
Same vendor: Voltronic Power
- CVE-2026-22199
Voltronic Power SNMP Web Pro 1.1 Path Traversal via upload.c - CVE-2026-22192
Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via l - CVE-2023-51595
Voltronic Power ViewPower Pro selectDeviceListBy SQL Injecti - CVE-2023-51593
Voltronic Power ViewPower Pro Expression Language Injection - CVE-2023-51591
Voltronic Power ViewPower Pro doDocument XML External Entity
Same weakness: CWE-749
- CVE-2026-25266
Exposed dangerous function in windows host - CVE-2026-5173
Exposed Dangerous Method or Function in GitLab - CVE-2026-35488
Tandoor Recipes — CustomIsShared permits DELETE/PUT on Recip - CVE-2026-30957
OneUptime Synthetic Monitor RCE via exposed Playwright brows - CVE-2026-3483
Ivanti Desktop and Server Management 安全漏洞
V. Comments for CVE-2023-51581
No comments yet