Apsystems vulnerabilities
We track 4 vulnerabilities in Apsystems products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 11, 2023.
Latest Apsystems vulnerabilities
- 7.2 High severity
Alternergy Power Control Software: Insufficient Verification of Data Authenticity
Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php.
- 9.8 Critical severity
Energy Communication Unit Firmware: Improper Neutralization of Special Elements used in an OS Command
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.
- 9.8 Critical severity
Ecu-r Firmware: Improper Neutralization of Special Elements used in an OS Command
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.
- 8.8 High severity
Ecu-c Firmware: Improper Access Control
An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenti