Vendor archive

apsystems CVEs

Beta · best-effort

4 CVEs tagged to vendor apsystems — 2 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-31502

Published May 11, 2023

Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php.

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2023-28343

Published Mar 14, 2023

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-45699

Published Feb 10, 2023

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone…

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 21.0

Vendor/product tagsBeta · best-effort

CVE-2022-44037

Published Nov 29, 2022

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data an…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1