Iocharger vulnerabilities

Newest CVEs

• CVE-2024-43651

  Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

  Iocharger · Iocharger firmware for AC models

  Critical9.3
• CVE-2024-43658

  Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.

  Iocharger · Iocharger firmware for AC models

  High7.2
• CVE-2024-43654

  Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

  Iocharger · Iocharger firmware for AC models

  Critical9.3
• CVE-2024-43649

  Authenticated command injection via <redacted>.exe <redacted> parameter

  Iocharger · Iocharger firmware for AC models

  Critical9.3
• CVE-2024-43660

  Arbitrary file download using <redacted>.sh

  Iocharger · Iocharger firmware for AC models

  High7.1
• CVE-2024-43653

  Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

  Iocharger · Iocharger firmware for AC models

  Critical9.3
• CVE-2024-43661

  Buffer overflow in <redacted>.so leads to DoS of OCPP service

  Iocharger · Iocharger firmware for AC models

  High7.1
• CVE-2024-43652

  Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

  Iocharger · Iocharger firmware for AC chargers

  Critical9.3
• CVE-2024-43657

  When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which will then be executed on the charging station.

  Iocharger · Iocharger firmware for AC models

  Critical9.3
• CVE-2024-43648

  Authenticated command injection via <redacted>.exe <redacted> parameter

  Iocharger · Iocharger firmware for AC models

  Critical9.3