CyberPower PowerPanel Enterprise DCIM - LDAP authentication path: If LDAP authentication is selected

Impact

If LDAP authentication is selected, the authentication mechanism is incomplete and every check can be bypassed. The operators most likely to be affected are the mature ones - the ones who wired their DCIM into corporate directory rather than using local accounts. Doing the responsible thing is what turns the bug on.

Who can reach it

Unauthenticated, remote, on any PowerPanel Enterprise instance configured for LDAP.

What to do

Upgrade PowerPanel Enterprise immediately. As an interim, switching off LDAP mode removes the vulnerable path but costs you central account control - a genuinely unpleasant trade, so prioritise the upgrade.

References

Related entries

• Supermicro BMC email/SMTP alert notification handler (H12DST-B): Command execution as root on the BMC, reached throughCVE-2023-35861 · Supermicro BMC email/SMTP alert notification handler (H12DST-B)Critical
• Juniper Junos OS J-Web (EX/SRX): Unauthenticated remote code execution by setting `PHPRC` through a crafted J-WebCVE-2023-36845 · Juniper Junos OS J-Web (EX/SRX)Critical
• Insyde InsydeH2O (AsfSecureBootDxe): Stack buffer overflow leading to arbitrary code execution during the DXE phaseCVE-2023-39281 · Insyde InsydeH2O (AsfSecureBootDxe)Critical
• lldpd (CDP PDU parser, cdp_decode): A crafted CDP PDU with specific CDP_TLV_ADDRESSES TLVs forces lldpdCVE-2023-41910 · lldpd (CDP PDU parser, cdp_decode)Critical
• Broadcom LSI Storage Authority (LSA) / Intel RAID Web Console 3 (RWC3)CVE-2023-4323 · Broadcom LSI Storage Authority (LSA) / Intel RAID Web Console 3 (RWC3) - management service for MegaRAID and LSI HBA…Critical
• ATEN PE6208 switched PDU: The PDU ships with a default telnet account and never forces the operator to changeCVE-2023-43845 · ATEN PE6208 switched PDUCritical