CVE-2023-28343: Apsystems Energy Communication Unit Firmware

Critical severity, CVSS 9.8. EPSS: 84.8% chance of exploitation in the next 30 days.

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.

Affected products

• Apsystems Energy Communication Unit Firmware: version c1.2.5 only

Published 2023-03-14. Last modified 2026-06-17.