CVE-2022-44037

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037Exploit, Third Party Advisory
https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037Exploit, Third Party Advisory

Timeline

Published: Nov 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-440389.8Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.CVE-2022-440399.8Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An at CVE-2022-440489.8The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code ex CVE-2022-440499.8The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code CVE-2022-440509.8The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential c CVE-2022-440519.8The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code e CVE-2022-440529.8The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code e CVE-2022-440539.8The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential c CVE-2022-440549.8The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code exe CVE-2022-440695.4Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.CVE-2022-44076.1Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.CVE-2022-440705.4Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.