PT-2025-34489 · Powershield+1 · Netguard+1

Published 2025-08-22 · Updated 2025-08-23 · CVE-2022-43110

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower versions 1.04-21353 and earlier PowerShield Netguard versions prior to 1.04-23292

Description: A remote attacker can configure the system via a web interface without authentication. This includes changing the web interface admin password, viewing/changing system configuration, enumerating connected UPS devices, and shutting down connected UPS devices. The attacker can also configure operating system commands to run if a connected UPS shuts down.

Recommendations: Voltronic Power ViewPower versions 1.04-21353 and earlier: Update to a newer version. PowerShield Netguard versions prior to 1.04-23292: Update to version 1.04-23292 or later.

Fix

Improper Access Control

Missing Authentication

Weakness Enumeration

CWE-284

CWE-425

CWE-306

Related Identifiers

CVE-2022-43110

Affected Products

Netguard

Viewpower

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-43110 · Security Note
• https://t.me/CVEtracker/30731 · Telegram Post
• https://t.me/cveNotify/133239 · Telegram Post
• https://ready2disclose.com/vpow-31491-43110 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-182-05 · Note
• https://twitter.com/CVEnew/status/1958980127402205594 · Twitter Post