CVE-2019-13071

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-07-10 · updated 2026-06-17
Weakness: CWE-352

Description

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.

Affected products

Cyberpowersystems Powerpanel: 3.4.0

References

http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
http://seclists.org/fulldisclosure/2019/Jul/11
http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html
http://seclists.org/fulldisclosure/2019/Jul/11

Get alerted when CVE-2019-13071 or the next vulnerability affects your stack