APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter. id: CVE-2022-45699 info: name: APsystems ECU-R Firmware - Command Injection author: pussycat0x severity:...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45699

creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:38+00:00| seen| https://t.me/cibsecurity/57896 2023-06-29 12:17:34+00:00| seen| MISP/e53ff6a5-95b3-4dca-a137-07f44618abb7 2025-03-24 18:22:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8488 2025-06-16...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45699

APSystems ECU-R version 5203 is vulnerable to a command injection flaw in its administration interface. A remote, unauthenticated attacker can exploit the timezone parameter to execute arbitrary commands with root privileges . This vulnerability could potentially compromise the entire solar power...