CVE-2023-51573
Critical · 9.8CVSS
9.8
EPSS
45.7%
Published
Apr 1, 2024
CISA due date
—
The record
Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the updateManagerPassword function. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-21203.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation… CWE-749
- CVE-2026-86711 electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron… CWE-749
- CVE-2026-52877 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
- CVE-2026-48056 Streambert is a cross-platform Electron Desktop App to stream and download video content. CWE-749
- CVE-2026-20467 In apusys, there is a possible escalation of privilege due to a missing bounds check. CWE-749
- CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability CWE-749
- CVE-2026-14620 webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints… CWE-749
- CVE-2026-54753 Nx is a monorepo solution for TypeScript and polyglot codebases. CWE-749