Description
EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EnerSys | AMPA | ≤ 22.09 | 22.10 |
Critical · 9.8
CVE-2024-11861
EUVD-2025-14171GHSA-hp57-25gh-2gjp
Command injection in EnerSys AMPA 22.09 and prior versions
Published May 9, 2025 · Updated May 12, 2025 · Assigned by Mandiant