PT-2025-20556 · Enersys · Enersys Ampa

Published 2025-05-09 · Updated 2025-05-12 · CVE-2024-12442

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EnerSys AMPA versions 24.04 through 24.16

Description The issue allows for command injection, which can lead to privileged remote shell access.

Recommendations For EnerSys AMPA versions 24.04 through 24.16, update to a version that is not affected by this issue to prevent command injection and potential remote shell access.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-12442

Affected Products

Enersys Ampa

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12442 · Security Note
• https://enersys.com/4996df/globalassets/documents/corporate/cve/enersys_cve-2024-12442-final.pdf · Vendor Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0002.md · Note
• https://twitter.com/SecAideInfo/status/1921872101914374638 · Twitter Post
• https://twitter.com/CVEnew/status/1920854340191097290 · Twitter Post
• https://t.me/cvetracker/23483 · Telegram Post
• https://t.me/cvedetector/24952 · Telegram Post