CVE-2022-43110

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-22 · updated 2026-06-17
Weakness: CWE-284

Description

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05
https://www.ready2disclose.com/vpow-31491-43110/

Get alerted when CVE-2022-43110 or the next vulnerability affects your stack