微型逆变器控制软件漏洞

中危CVE-2024-113052024/11/17

Altenergy Power Control Software - SQL Injection

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function get_status_zigbee of the file /index.php/display/status_zigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated remotely.

energy_communication_unit_firmware 微型逆变器控制软件PoC 已收录

CVSS6.3EPSS 64.9%

严重CVE-2023-283432023/03/14

Altenergy Power Control Software C1.2.5 - Remote Command Injection

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.

微型逆变器控制软件PoC 已收录EXP 已收录RCE

CVSS9.8EPSS 93.8%

严重CVE-2022-456992023/02/10

APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

微型逆变器控制软件PoC 已收录

CVSS9.8EPSS 90.9%

微型逆变器控制软件

关联漏洞

Altenergy Power Control Software - SQL Injection

Altenergy Power Control Software C1.2.5 - Remote Command Injection

APsystems ECU-R Firmware - Command Injection