POWERCOM CO., LTD. — Vulnerabilities & Security Advisories 4

POWERCOM CO., LTD. develops uninterruptible power supply (UPS) systems and power management solutions for critical infrastructure. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and insecure default configurations. The company has recorded four CVEs, with vulnerabilities affecting web interfaces and communication protocols that could allow attackers to disrupt power operations or gain unauthorized system access. While no major public incidents have been widely reported, the recurring nature of these vulnerabilities highlights ongoing security challenges in embedded systems managing essential utilities.