CoreCVE
Back

HIGH

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range

Published Nov 29, 2022

Description

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-284

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 29, 2022
Updated Apr 25, 2025
Reserved Oct 30, 2022
Link CVE-2022-44037
CISA Vulnrichment
Updated Apr 25, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-44037
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-44037