Description
EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EnerSys | AMPA | 24.04 – ≤ 24.16 | 24.17 |
Critical · 9.8
CVE-2024-12442
EUVD-2025-14170GHSA-p2j9-hh6h-8mxx
Command injection in EnerSys AMPA versions 24.04 through 24.16, inclusive
Published May 9, 2025 · Updated May 13, 2025 · Assigned by Mandiant