Description
Voltronic Power VP存在信息泄露漏洞。该漏洞是由于getModbusPassword 方法对用户的请求验证不当。
Voltronic Power VP getModbusPassword 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-51587
https://www.zerodayinitiative.com/advisories/ZDI-23-1892/
https://github.com/advisories/GHSA-g29m-vq8m-35pg
https://vuldb.com/vuln/248642
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:MISC:VOLT-PW-VIEWPW-INF-DIS.html
https://cve.imfht.com/vendor/Voltronic%20Power