{"id":"CVE-2024-33615","aliases":["EUVD-2024-34477","GHSA-694q-5223-w869"],"status":"published","title":"CyberPower PowerPanel business Relative Path Traversal","description":"A specially crafted Zip file containing path traversal characters can be\n imported to the \nCyberPower PowerPanel \n\nserver, which allows file writing to the server outside\n the intended scope, and could allow an attacker to achieve remote code \nexecution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00713,"percentile":0.54091,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-23"],"published":"2024-05-15T19:23:24Z","modified":"2026-06-17T07:32:05Z","products":[{"vendor":"cyberpower","product":"powerpanel business"},{"vendor":"cyberpower","product":"powerpanel_business"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01","tags":["x_transferred"]},{"url":"https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33615"},{"url":"https://github.com/advisories/GHSA-694q-5223-w869"}],"sources":{"cve":[{"id":"CVE-2024-33615","title":"CyberPower PowerPanel business Relative Path Traversal","description":"A specially crafted Zip file containing path traversal characters can be\n imported to the \nCyberPower PowerPanel \n\nserver, which allows file writing to the server outside\n the intended scope, and could allow an attacker to achieve remote code \nexecution.","status":"published","published":"2024-05-15T19:23:24.378Z","modified":"2024-08-02T02:36:04.306Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:34:21.404483Z"}],"euvd":[{"id":"EUVD-2024-34477","description":"A specially crafted Zip file containing path traversal characters can be\n imported to the \nCyberPower PowerPanel \n\nserver, which allows file writing to the server outside\n the intended scope, and could allow an attacker to achieve remote code \nexecution.","status":"published","published":"2024-05-15T19:23:24Z","modified":"2024-08-02T02:36:04Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:21.908049Z"}],"ghsa":[{"id":"GHSA-694q-5223-w869","title":"A specially crafted Zip file containing path traversal characters can be\n imported to the ...","description":"A specially crafted Zip file containing path traversal characters can be\n imported to the \nCyberPower PowerPanel \n\nserver, which allows file writing to the server outside\n the intended scope, and could allow an attacker to achieve remote code \nexecution.","status":"published","published":"2024-05-15T21:31:25Z","modified":"2024-05-15T21:31:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:57:22.29356Z"}],"nvd":[{"id":"CVE-2024-33615","description":"A specially crafted Zip file containing path traversal characters can be\n imported to the \nCyberPower PowerPanel \n\nserver, which allows file writing to the server outside\n the intended scope, and could allow an attacker to achieve remote code \nexecution.","status":"published","published":"2024-05-15T20:15:12.687Z","modified":"2026-06-17T07:32:05.603Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:09:59.094954Z"}]}}