Apsystems

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-31502 May 11, 22:15 HIGH POC This Week

Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Alternergy Power Control Software Apsystems

NVD GitHub

CVSS 3.1

7.2

EPSS

0.7%

CVE-2023-28343 Mar 14, 20:15 CRITICAL POC THREAT Act Now

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Energy Communication Unit Firmware Apsystems

NVD GitHub Exploit-DB

CVSS 3.1

9.8

EPSS

85.3%

CVE-2022-44037 Nov 29, 04:15 HIGH POC This Week

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Information Disclosure Ecu C Firmware Apsystems

NVD

CVSS 3.1

8.8

EPSS

0.6%

CVE-2023-31502

EPSS 1% CVSS 7.2

HIGH POC This Week

PHP RCE Alternergy Power Control Software +1

NVD GitHub

CVE-2023-28343

EPSS 85% CVSS 9.8

CRITICAL POC THREAT Act Now

PHP Command Injection Energy Communication Unit Firmware +1

NVD GitHub Exploit-DB

CVE-2022-44037

EPSS 1% CVSS 8.8

HIGH POC This Week

Authentication Bypass Information Disclosure Ecu C Firmware +1

NVD