{"id":"CVE-2010-0103","aliases":["EUVD-2010-0135","GHSA-r443-h767-83gp"],"status":"published","title":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is...","description":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.27338,"percentile":0.98074,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-94"],"published":"2010-03-09T19:00:00Z","modified":"2026-06-16T23:15:28Z","exploits":[{"source":"exploitdb","id":"EDB-16390","title":"Arugizer Trojan Horse (Energizer DUO) - Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2010-09-20","verified":true,"url":"https://www.exploit-db.com/exploits/16390"},{"source":"metasploit","id":"auxiliary/scanner/backdoor/energizer_duo_detect","title":"Energizer DUO Trojan Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/backdoor/energizer_duo_detect"},{"source":"metasploit","id":"exploit/windows/backdoor/energizer_duo_payload","title":"Energizer DUO USB Battery Charger Arucer.dll Trojan Code Execution","type":"exploit","platform":"Windows","date":"2010-03-05","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/backdoor/energizer_duo_payload"}],"products":[{"vendor":"energizer","product":"duo_usb"}],"references":[{"url":"http://www.symantec.com/connect/blogs/trojan-found-usb-battery-charger-software","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/38571","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/154421","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0103"},{"url":"https://github.com/advisories/GHSA-r443-h767-83gp"}],"sources":{"cve":[{"id":"CVE-2010-0103","description":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.","status":"published","published":"2010-03-09T19:00:00Z","modified":"2024-09-17T01:25:57.601Z","updated_at":"2026-11-02T14:33:29.990758Z"}],"euvd":[{"id":"EUVD-2010-0135","description":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.","status":"published","published":"2010-03-09T19:00:00Z","modified":"2024-09-17T01:25:57Z","updated_at":"2026-11-03T00:28:49.824577Z"}],"ghsa":[{"id":"GHSA-r443-h767-83gp","title":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is...","description":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.","status":"published","published":"2022-05-02T06:10:10Z","modified":"2023-01-31T05:09:26Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:49:30.8182Z"}],"nvd":[{"id":"CVE-2010-0103","description":"UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.","status":"published","published":"2010-03-10T20:13:02.667Z","modified":"2026-06-16T23:15:28.757Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:01:40.249593Z"}]}}