Read the docs

Group Arge Energy and Control Systems

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Group Arge Energy and Control Systems records in CISA KEV

No Group Arge Energy and Control Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartpower Web 7 records MEDIUM Smartpower 1 record MEDIUM

Records

7 records in Smartpower Web · all components

TI-2022-22177 CVE-2022-45088 · GHSA-98r2-j37g-59rm

Local File Inclusion in Smartpower Web

Priority MEDIUM 50

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00724 Published 2023-02-08 Fixed in 23.01.01 CWE-20
TI-2022-22179 CVE-2022-45090 · GHSA-j42q-qx22-hx5m

SQL Injection in Smartpower Web

Priority MEDIUM 41

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0064 Published 2023-02-08 Fixed in 23.01.01 CWE-89
TI-2022-22178 CVE-2022-45089 · GHSA-r8f3-7jxf-3847

SQL Injection in Smartpower Web

Priority MEDIUM 41

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0064 Published 2023-02-08 Fixed in 23.01.01 CWE-89
TI-2022-22174 CVE-2022-45085 · GHSA-83vx-xm77-c4mm

Server-Side Request Forgery in Smartpower Web

Priority LOW 30

Server-Side Request Forgery (SSRF) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows : Server Side Request Forgery.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00552 Published 2023-02-08 Fixed in 23.01.01 CWE-918
TI-2022-22176 CVE-2022-45087 · GHSA-6h32-pvwh-xx2f

Cross-site Scripting in Smartpower Web

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00378 Published 2023-02-08 Fixed in 23.01.01 CWE-79
TI-2022-22180 CVE-2022-45091 · GHSA-2rvr-w7cm-2x8g

Cross-site Scripting in Smartpower Web

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2023-02-08 Fixed in 23.01.01 CWE-79
TI-2022-22175 CVE-2022-45086 · GHSA-xj8j-hpff-95j8

Cross-site Scripting in Smartpower Web

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00358 Published 2023-02-08 Fixed in 23.01.01 CWE-79
Open these records in search →