Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2023-31502
Disclosure Date: May 11, 2023 (last updated February 24, 2025)
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php.
0
Attacker Value
Unknown
CVE-2023-28343
Disclosure Date: March 14, 2023 (last updated February 24, 2025)
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.
0
Attacker Value
Unknown
CVE-2022-45699
Disclosure Date: February 10, 2023 (last updated February 24, 2025)
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.
0
Attacker Value
Unknown
CVE-2022-44037
Disclosure Date: November 29, 2022 (last updated February 24, 2025)
An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.
0
