APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter. id: CVE-2022-45699 info: name: APsystems ECU-R Firmware - Command Injection author: pussycat0x severity:...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45699

creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:38+00:00| seen| https://t.me/cibsecurity/57896 2023-06-29 12:17:34+00:00| seen| MISP/e53ff6a5-95b3-4dca-a137-07f44618abb7 2025-03-24 18:22:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8488 2025-06-16...

CVE-2022-45699

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter...

CVE-2022-45699

APSystems ECU-R firmware, version 5203, is affected by a command injection in the administration interface via the timezone parameter. The vulnerability allows an unauthenticated remote attacker to execute arbitrary commands as root, potentially compromising the solar power management system. Roo...