{"id":"CVE-2022-43110","aliases":["EUVD-2022-46159","GHSA-fg3v-43xx-v788"],"status":"published","title":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a...","description":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0066,"percentile":0.51928,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-284","CWE-306","CWE-425"],"published":"2025-08-22T00:00:00Z","modified":"2026-06-17T05:05:56Z","exploits":[{"source":"pocgithub","id":"ready2disclose/CVE-2022-43110","title":"ready2disclose/CVE-2022-43110","date":"2025-07-03","url":"https://github.com/ready2disclose/CVE-2022-43110"}],"references":[{"url":"https://www.ready2disclose.com/vpow-31491-43110/"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-43110"},{"url":"https://www.ready2disclose.com/vpow-31491-43110"},{"url":"https://github.com/advisories/GHSA-fg3v-43xx-v788"}],"sources":{"cve":[{"id":"CVE-2022-43110","description":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.","status":"published","published":"2025-08-22T00:00:00Z","modified":"2025-08-22T20:25:23.662Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-425","CWE-306","CWE-284"],"updated_at":"2026-11-02T14:34:25.308772Z"}],"euvd":[{"id":"EUVD-2022-46159","description":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.","status":"published","published":"2025-08-22T00:00:00Z","modified":"2025-08-22T20:25:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:54.001843Z"}],"ghsa":[{"id":"GHSA-fg3v-43xx-v788","title":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a...","description":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.","status":"published","published":"2025-08-22T21:31:16Z","modified":"2025-08-22T21:31:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:03:23.253097Z"}],"nvd":[{"id":"CVE-2022-43110","description":"Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.","status":"published","published":"2025-08-22T20:15:31.777Z","modified":"2026-06-17T05:05:56.18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-284","CWE-306","CWE-425"],"updated_at":"2026-11-02T14:07:43.071398Z"}]}}