Command injection

2023-02-1002:15:00

PRIOn knowledge base

www.prio-n.com

command injection

apsystems

remote attack

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.5%

JSON

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

CPENameOperatorVersion
ecu-r_firmwareeq5203

CPE	Name	Operator	Version
	ecu-r_firmware	eq	5203

References

github.com/0xst4n/APSystems-ECU-R-RCE-Timezone

www.youtube.com/watch?v=YNeeaDPJOBY