PT-2025-1636 · Cyberpower · Cyberpower Powerpanel Business

Published 2025-01-15 · Updated 2025-04-02 · CVE-2024-11322

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CyberPower PowerPanel Business version 4.11.0

Description A denial-of-service issue exists, allowing an unauthenticated remote attacker to restart the ppbd.exe process via the PowerPanel Business Service Watchdog service listening on TCP port 2003. The attacker can repeatedly restart ppbd.exe to render it unavailable.

Recommendations For CyberPower PowerPanel Business version 4.11.0, as a temporary workaround, consider restricting access to the PowerPanel Business Service Watchdog service on TCP port 2003 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-11322

Affected Products

Cyberpower Powerpanel Business

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-11322 · Security Note
• https://t.me/cvedetector/15462 · Telegram Post
• https://tenable.com/security/research/tra-2025-01 · Note
• https://twitter.com/CVEnew/status/1879657536464281649 · Twitter Post
• https://twitter.com/PPHM_HackerNews/status/1907579040107528425 · Twitter Post