130 matches found
CVE-2024-33226
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2024-33226
A security vulnerability exists in the Access64.sys component of Wistron Corporation TBT Force Power Control v1.0.0.0 . Attackers can exploit this flaw by sending crafted IOCTL requests to achieve privilege escalation and arbitrary code execution . As a temporary workaround, it is recommended to ...
CVE-2024-33226: Improper Privilege Management
An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
Wistron Corporation TBT Force Power Control 安全漏洞
Wistron Corporation TBT Force Power Control is a power management solution from Wistron Corporation China. A security vulnerability exists in Wistron Corporation TBT Force Power Control version v1.0.0.0, which originates from a security flaw in the component Access64.sys. The vulnerability can be...
APsystems Energy Communication Unit (ECU-C) Power Control Software
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable via adjacent network / low attack complexity Vendor : APsystems Equipment : Energy communication Unit ECU-C Power Control Software Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this...
The "Power Status" of all VDAs are displayed as "Unknown"
In DaaS management, the "Power Status" of all VDAs was displayed as "Unknown",Power control startup, shutdown, restart, etc. could not be performed. Also, when power control was executed, the log on the Citrix side would show "Success".However, the power action was not executed on the Azure VDA...
VulnCheck KEV: CVE-2023-28343
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/settimezone timezone parameter, because of settimezone in models/managementmodel.php...
CVE-2023-3259
The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "iBootPduSiteAuth" cookie, a malicious agent can direct the device to connect to a rouge database.Successful exploitation allows the...
CISA Releases One Industrial Control Systems Advisory
CISA released one Industrial Control Systems ICS advisory on August 1, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-213-01 APSystems Altenergy Power Control CISA encourages users and administrators to review...
PT-2023-22789 · Pcu · Pcu
Name of the Vulnerable Software and Affected Versions: PCU affected versions not specified Description: The issue concerns the insecure data flow between the PCU and its modules. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device whil...
CVE-2023-31502
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...
Remote code execution
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...
CVE-2023-31502
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...
CVE-2023-31502
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...
CVE-2023-31502: Insufficient Verification of Data Authenticity
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution RCE vulnerability via the component /models/managementmodel.php...
CVE-2023-31502
CVE-2023-31502 affects Altenergy Power Control Software C1.2.5, where a remote code execution (RCE) vulnerability is exposed via the component /models/management_model.php. The root cause is not detailed in the provided documents beyond the RCE path, but CVSS v3.1 metrics indicate network access,...
PT-2023-23366 · Altenergy · Altenergy Power Control
Name of the Vulnerable Software and Affected Versions: Altenergy Power Control Software version C1.2.5 Description: The issue is related to a remote code execution RCE vulnerability. It affects the component /models/management model.php, allowing for potential exploitation. Recommendations: For...
The vulnerability in the Altenergy Power Control software’s models/management_model.php script allows a perpetrator to elevate their privileges and execute arbitrary commands.
The vulnerability of Altenergy Power Control software is related to the execution of operating system commands in /settimezone. Exploiting this vulnerability allows a remote attacker to increase their privileges and execute arbitrary commands...
Altenergy Power Control Software C1.2.5 Command Injection
Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection Google Dork: intitle:"Altenergy Power Control Software" Date: 15/3/2023 Exploit Author: Ahmed Alroky Vendor Homepage: https://apsystems.com/ Version: C1.2.5 Tested on: Windows 10 CVE : CVE-2023-28343 import requests...
Altenergy Power Control Software C1.2.5 - OS command injection
Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection Google Dork: intitle:"Altenergy Power Control Software" Date: 15/3/2023 Exploit Author: Ahmed Alroky Vendor Homepage: https://apsystems.com/ Version: C1.2.5 Tested on: Windows 10 CVE : CVE-2023-28343 import requests...