CVE-2021-30490: Power-Software-Download Viewpower

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation.

Affected products

Published 2022-08-16. Last modified 2026-06-17.