CVE-2022-44037 - An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA

CVE-2022-44037

Summary

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.

References

https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037

Vulnerable Configurations

cpe:2.3:o:apsystems:ecu-c_firmware:c1.2.2:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:c1.2.2:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v3.11.4:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v3.11.4:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v4.1na:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v4.1na:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v4.1saa:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:v4.1saa:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:w2.1na:*:*:*:*:*:*:*
cpe:2.3:o:apsystems:ecu-c_firmware:w2.1na:*:*:*:*:*:*:*
cpe:2.3:h:apsystems:ecu-c:-:*:*:*:*:*:*:*
cpe:2.3:h:apsystems:ecu-c:-:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

08-08-2023 - 14:21

Published

29-11-2022 - 04:15

Last modified

08-08-2023 - 14:21