CVE-2022-43110 in Power ViewPower
Summary
by MITRE • 08/22/2025
Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 08/22/2025
This vulnerability affects Voltronic Power ViewPower software versions through 1.04-21353 and PowerShield Netguard versions before 1.04-23292, representing a critical remote code execution and privilege escalation risk. The flaw resides in an unspecified web interface that lacks proper authentication mechanisms, allowing unauthenticated attackers to gain full administrative control over affected systems. The vulnerability demonstrates characteristics of cwe-287 authentication bypass and cwe-79 injection flaws, creating a pathway for attackers to manipulate system configurations without requiring valid credentials. The affected systems operate within the industrial control systems and power management domains, where such vulnerabilities can have severe operational impacts.
The technical implementation of this vulnerability enables attackers to perform multiple malicious activities through the exposed web interface. Remote attackers can change administrative passwords, access and modify system configurations, enumerate connected UPS devices, and shut down connected UPS systems. This capability extends to configuring operating system commands that execute when the system detects a UPS shutdown event, potentially allowing attackers to execute arbitrary code on the target system. The vulnerability's impact aligns with attack techniques described in the attack framework under t1078 valid accounts and t1203 scheduled task job, where attackers leverage compromised systems to establish persistent access and execute malicious payloads. The flaw represents a significant security weakness in the software's web interface implementation and demonstrates inadequate input validation and access control mechanisms.
The operational impact of this vulnerability extends beyond simple unauthorized access to encompass potential system compromise and operational disruption. Attackers can manipulate power management configurations, potentially causing service interruptions or creating backdoor access points within network infrastructure. The ability to shut down connected UPS devices creates opportunities for denial of service attacks and can compromise critical system availability. Organizations relying on Voltronic power management solutions face risks including unauthorized system modifications, potential data loss, and extended service outages. The vulnerability's presence in both ViewPower and PowerShield Netguard products indicates a widespread impact across Voltronic's power management portfolio, affecting facilities that depend on these systems for critical infrastructure protection. This weakness directly violates security principles outlined in the nist cyber security framework, particularly in the protection and detection categories.
Mitigation strategies should focus on immediate patching of affected systems to address the authentication bypass vulnerability. Organizations must ensure all affected Voltronic PowerShield Netguard systems are updated to version 1.04-23292 or later, while ViewPower systems should be upgraded to version 1.04-21353 or newer. Network segmentation and access control measures should be implemented to restrict access to the affected web interfaces, particularly in environments where these systems are exposed to untrusted networks. Security monitoring should be enhanced to detect unauthorized access attempts and configuration changes on affected systems. The vulnerability highlights the importance of secure web application development practices, including proper authentication implementation, input validation, and access control mechanisms. Organizations should conduct comprehensive vulnerability assessments to identify other potentially affected systems and implement network-based controls to limit exposure to this type of attack vector. Regular security updates and patch management processes should be strengthened to prevent similar vulnerabilities from being introduced in the future.