Showing 1 vulnerability on this page for ecu-r_firmware

Signals CISA KEV Ransomware Nuclei
apsystems vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

apsystems ecu-r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

CWE-77CWE-78CWE-94Feb 10, 20231 related artifact
CVSS9.8v3.1EPSS76.6%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX