47
CVE-2022-45699
- CVSS 3.1
- 9.8 critical
- EPSS
- 77%p100
- Published
- ·
- Modified
Description · NVD
Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.
- Vendors
- apsystems
- Products
- ecu-r firmware
- Weakness
- CWE-78, CWE-94
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news
2 storiesIoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits
Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.
42