APSystems Altenergy Power Control

ics🔗 www.cisa.gov👁 22 Views

APSystems Altenergy Power Control vulnerability, Exploitable OS Command Injection, Risk to Energy sector, No response from APSystems to mitigate

Reporter	Title	Published	Views	Family All 16
0day.today	Altenergy Power Control Software C1.2.5 - OS command injection	7 Apr 202300:00	–	zdt
BDU FSTEC	The vulnerability in the Altenergy Power Control software’s models/management_model.php script allows a perpetrator to elevate their privileges and execute arbitrary commands.	17 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-28343	14 Mar 202323:23	–	circl
CNNVD	Altenergy Power System Control Software 操作系统命令注入漏洞	14 Mar 202300:00	–	cnnvd
CVE	CVE-2023-28343	14 Mar 202300:00	–	cve
Cvelist	CVE-2023-28343	14 Mar 202300:00	–	cvelist
GithubExploit	Exploit for OS Command Injection in Apsystems Energy_Communication_Unit_Firmware	23 Mar 202315:19	–	githubexploit
Exploit DB	Altenergy Power Control Software C1.2.5 - OS command injection	8 Apr 202300:00	–	exploitdb
Nuclei	Altenergy Power Control Software C1.2.5 - Remote Command Injection	8 Jun 202604:09	–	nuclei
NVD	CVE-2023-28343	14 Mar 202320:15	–	nvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-213-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-213-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

01 Aug 2023 06:00Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.93791

SSVC