CVE-2023-3265

Name of the Vulnerable Software and Affected Versions CyberPower PowerPanel Enterprise (affected versions not specified)

Description An authentication bypass exists in CyberPower PowerPanel Enterprise due to the failure to sanitize meta-characters from the username, allowing an attacker to log in to the application with the default user "cyberpower" by appending a non-printable character. An unauthenticated attacker can leverage this issue to log in to the CyberPower PowerPanel Enterprise as an administrator with hardcoded default credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.