CVE-2022-45699

CVE-2022-45699 is a critical command injection vulnerability affecting the administration interface of APSystems ECU-R version 5203. A remote, unauthenticated attacker can exploit this flaw by manipulating the timezone parameter to execute arbitrary commands as the root user. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public Metasploit/ExploitDB modules, Nuclei templates exist, and the vulnerability has not garnered significant community discussion or media coverage.