PT-2025-20555 · Enersys · Enersys Ampa

Published 2025-05-09 · Updated 2025-05-12 · CVE-2024-11861

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EnerSys AMPA versions 22.09 and prior

Description The issue allows for command injection, which can lead to privileged remote shell access.

Recommendations For versions 22.09 and prior, update to a version later than 22.09 to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-11861

Affected Products

Enersys Ampa

References · 7

• https://enersys.com/4996bf/globalassets/documents/corporate/cve/enersys_cve-2024-11861-final.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11861 · Security Note
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0001.md · Note
• https://twitter.com/CVEnew/status/1920854341390659815 · Twitter Post
• https://twitter.com/SecAideInfo/status/1921872111317946718 · Twitter Post
• https://t.me/cvetracker/23482 · Telegram Post
• https://t.me/cvedetector/24951 · Telegram Post