8.8

CVE-2022-44037

Exploit
An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apsystems ≫ Ecu-c Firmware Version c1.2.2
   Apsystems ≫ Ecu-c Version -
Apsystems ≫ Ecu-c Firmware Version v3.11.4
   Apsystems ≫ Ecu-c Version -
Apsystems ≫ Ecu-c Firmware Version v4.1na
   Apsystems ≫ Ecu-c Version -
Apsystems ≫ Ecu-c Firmware Version v4.1saa
   Apsystems ≫ Ecu-c Version -
Apsystems ≫ Ecu-c Firmware Version w2.1na
   Apsystems ≫ Ecu-c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.459
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037
Third Party Advisory
Exploit