Chinese name: Altenergy Power System Control Software set_timezone 远程命令执行漏洞（CVE-2023-28343）
CVSS core:9.0
Description : Altenergy Power System Control Software is a microinverter control software from Altenergy Power System.
Impact : There is a security vulnerability in AlAltenergy Power System Control Software C1.2.5, which is caused by an operating system command injection vulnerability in /set_timezone. An attacker can execute arbitrary commands to obtain server privileges.
Goby Official URL: https://gobies.org/
If you have a functional type of issue, you can raise an issue on GitHub or in the discussion group below:
- GitHub issue: https://github.com/gobysec/Goby/issues
- Telegram Group: http://t.me/gobies (Group benefits: enjoy the version update 1 month in advance)
- Telegram Channel: https://t.me/joinchat/ENkApMqOonRhZjFl (Channel benefits: enjoy the version update 1 month in advance)
- WeChat Group: First add my personal WeChat: gobyteam, I will add everyone to the official WeChat group of Goby. (Group benefits: enjoy the version update 1 month in advance)