CVE-2022-43110

Critical

Description

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices. This extends to being able to configure operating system commands that should run if the system detects a connected UPS shutting down.

SeverityCritical

CVSS9.8

Exploit probability—

ProductViewPower

PublishedAug 22, 2025

First seenAug 22, 2025

Weakness typeCWE-425CWE-425 CWE-306Missing authentication for critical function CWE-284Improper access control

How to fix

Update

Voltronic Power PowerShield Netguard1.04-23292 or later

Affected products

Product	Affected versions	Fixed in
Voltronic Power ViewPower	v ≤ 1.04-21353	—
Voltronic Power PowerShield Netguard	No range specified	1.04-23292

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.