CVE-2022-45699

2023-02-1000:00:00

mitre

www.cve.org

apsystems

command injection

administration interface

remote

unauthenticated

root

timezone parameter

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.5%

JSON

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

References

github.com/0xst4n/APSystems-ECU-R-RCE-Timezone

www.youtube.com/watch?v=YNeeaDPJOBY