What’s Vulnerable › Vulnerabilities

CVE-2021-30490

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-16 · updated 2026-06-17
• Weakness: CWE-276

Description

upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.

Affected products

• Power-Software-Download Viewpower: from 1.04-21012 through 1.04-21353

References

• https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html
• https://www.power-software-download.com/viewpower.html
• https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html
• https://www.power-software-download.com/viewpower.html

Get alerted when CVE-2021-30490 or the next vulnerability affects your stack