CVE-2024-31409

—

CVSS 3.1

7.5 high

EPSS

<1%p29

Published

May 15, 2024 (May 15, 2024)

Modified

Jun 17, 2026

Description

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device.

Vendors: cyberpower
Products: powerpanel
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.