Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
NØX Echo Lineage Signal: CVE-2023-28343 Entity: energy_communication_unit_firmware Lineage: Public vulnerability → Public exploit/PoC → Observed exploitation Relationship: - energy_communication_unit_firmware → CVE-2023-28343 → Evidence → Operational Risk
NØØT Security Alerts Classification: Critical CVE: CVE-2023-28343 Product: apsystems / energy_communication_unit_firmware Summary: VulnCheck reports real-world exploitation activity affecting apsystems / energy_communication_unit_firmware. Evidence: Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 04 Dec 2023 Source: https://vulncheck.com/xdb/579c3b21a7ee #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #energy_communication_unit_firmware #CVE_2023_28343 #ActiveExploitation #Exploit
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | apsystems | energy_communication_unit | - | - | - |
| OS | apsystems | energy_communication_unit_firmware | c1.2.5 | - | - |