CVE-2024-33615

—

CVSS 3.1

8.8 high

EPSS

<1%p52

Published

May 15, 2024 (May 15, 2024)

Modified

Jun 17, 2026

Description

A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel server, which allows file writing to the server outside the intended scope, and could allow an attacker to achieve remote code execution.

Weakness: CWE-23
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.