CVE-2022-31491
Critical
Description
Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this to run arbitrary code immediately regardless of any managed UPS state or presence.
SeverityCritical
CVSS10.0
Exploit probability—
ProductViewPower
PublishedAug 22, 2025
First seenAug 22, 2025
Weakness typeCWE-749CWE-749CWE-94Code injection
How to fix
Update
- Voltronic Power PowerShield Netguard1.04-23292 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Voltronic Power ViewPower | v ≤ 1.04-24215 | — |
| Voltronic Power ViewPower Pro | v ≤ 2.0-22165 | — |
| Voltronic Power PowerShield Netguard | No range specified | 1.04-23292 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.