PT-2023-23366 · Altenergy · Altenergy Power Control
CVE-2023-31502
·
Publicado
2023-05-11
·
Atualizado
2023-05-22
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Altenergy Power Control Software version C1.2.5
Description
The issue is related to a remote code execution (RCE) vulnerability. It affects the component /models/management model.php, allowing for potential exploitation.
Recommendations
For Altenergy Power Control Software version C1.2.5, consider restricting access to the /models/management model.php component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Insufficient Verification of Data Authenticity
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Altenergy Power Control