Security readout for executives and security teams
Plain-English summary
ViewPower/ViewPowerHTML had weak permissions around the upsMonitor service binary. A normal authenticated Windows user could modify files tied to that service and potentially gain higher privileges on the host. This is mainly a local compromise risk, not evidence of internet-scale remote exploitation.
Executive priority
Prioritize hosts where ViewPower runs with elevated service rights and where multiple users have login access. Remediate during near-term maintenance unless exposed systems support critical operations or shared access.
Technical view
CVE-2021-30490 affects ViewPower/ViewPowerHTML 1.04-21012 through 1.04-21353. The reported issue is insecure permissions on the upsMonitor service binary, allowing an authenticated user to modify files and escalate privileges. The source bundle provides no CVSS, CWE, confirmed fixed version, or active exploitation evidence.
Likely exposure
Exposure is likely limited to systems running the named ViewPower/ViewPowerHTML versions, especially shared workstations, UPS management hosts, or servers where non-admin users can log in locally or remotely.
Exploitation context
The CVE references a public technical write-up, but the bundle does not show CISA KEV listing or cited evidence of active exploitation. Treat exploitability as plausible for authenticated local users, with active exploitation unconfirmed.
Researcher notes
The record lacks CVSS, CWE, CPE, and explicit vendor remediation details. Analysis relies on the CVE description, version range in the title, and referenced public write-up. Avoid assuming broader products or active exploitation without additional evidence.
Mitigation direction
- Inventory systems for ViewPower/ViewPowerHTML 1.04-21012 through 1.04-21353.
- Check vendor guidance and downloads for a fixed or newer supported build.
- Remove or disable ViewPower where it is not operationally required.
- Restrict interactive access to UPS management hosts.
- Ensure only administrators and trusted service accounts can modify service binaries.
- Monitor the upsMonitor binary path for unexpected file changes.
Validation and detection
- Confirm installed ViewPower/ViewPowerHTML version on each UPS management host.
- Review filesystem permissions on the upsMonitor service binary location.
- Verify non-admin authenticated users cannot modify service binary files.
- Review service configuration and file integrity logs for suspicious changes.
- Document whether a vendor-supported fixed version is available.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Privilege behavior lookup
The CVE wording references privilege impact, so privilege escalation and authorization behavior review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2021-30490 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.power-software-download.com/viewpower.htmlCVE reference · x_refsource_MISC
- https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.