Voltronic Power and PowerShield UPS monitoring software

Risk Summary

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down UPS connected devices or execution of arbitrary code.

CVEs (2)

Remediations

• Voltronic Power has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of these affected products are invited to contact Voltronic Power customer support for additional information.
• Powershield is aware of the issue and has provided a fix in NetGuard versions 1.04-23292 and later. For more information, refer to Powershield's software page. User can also contact Powershield via email or phone: +618 9209 3839.

Affected Vendors

Affected Products (3)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy