CVE-2023-3267
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
CVE-2023-3267 allows an authenticated user to pass arbitrary OS commands through the username field when adding a remote backup location. This field is passed unsanitized into CMD running as NT/Authority System.
Risk Assessment
An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server, posing a significant security risk.
Recommendation
It is recommended to implement proper input sanitization mechanisms and restrict user permissions for adding remote backup locations.
Original NVD description (English source)
When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with system-level access to the CyberPower PowerPanel Enterprise server.