CVE-2022-44037

8.8 highEPSS 0.6%

High (8.8) in apsystems ecu-c firmware. EPSS 0.6% chance of exploitation in the next 30 days.

An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple attacks, such as attacking wireless network in the product's range.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2022-11-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apsystems:ecu-c_firmware

References

https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037
https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-44037

Check your stack JSON