CVE-2023-3267

CriticalCVSS 9.1

Published: 14/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.68%

74th percentile - higher than 74% of all known CVEs

Summary

CVE-2023-3267 allows an authenticated user to pass arbitrary OS commands through the username field when adding a remote backup location. This field is passed unsanitized into CMD running as NT/Authority System.

Risk Assessment

An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server, posing a significant security risk.

Recommendation

It is recommended to implement proper input sanitization mechanisms and restrict user permissions for adding remote backup locations.

Other vulnerabilities in CyberPower PowerPanel Enterprise

CVE-2023-3265Critical
An authentication bypass exists on CyberPower PowerPanel Enterprise due to failing to sanitize meta-characters from the username. An attacker can log in to the application with the default user 'cyberpower' by appending a non-printable character.

Original NVD description (English source)

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.