{"id":"CVE-2025-5743","aliases":["EUVD-2025-17634","GHSA-jqqm-2p4m-968q"],"status":"published","title":"CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command...","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nvulnerability exists that could cause remote control over the charging station when an authenticated user\nmodifies configuration parameters on the web server.","severity":{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00936,"percentile":0.61121,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2025-06-10T08:15:42Z","modified":"2026-06-17T09:48:40Z","products":[{"vendor":"schneider electric","product":"evlink wallbox"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-161-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2025-161-03.pdf"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5743"},{"url":"https://github.com/advisories/GHSA-jqqm-2p4m-968q"}],"sources":{"cve":[{"id":"CVE-2025-5743","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nvulnerability exists that could cause remote control over the charging station when an authenticated user\nmodifies configuration parameters on the web server.","status":"published","published":"2025-06-10T08:15:42.268Z","modified":"2025-10-07T03:29:00.117Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:32:29.97618Z"}],"euvd":[{"id":"EUVD-2025-17634","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nvulnerability exists that could cause remote control over the charging station when an authenticated user\nmodifies configuration parameters on the web server.","status":"published","published":"2025-06-10T08:15:42Z","modified":"2025-10-07T03:29:00Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T20:31:35.828093Z"}],"ghsa":[{"id":"GHSA-jqqm-2p4m-968q","title":"CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command...","description":"CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nvulnerability exists that could cause remote control over the charging station when an authenticated user\nmodifies configuration parameters on the web server.","status":"published","published":"2025-06-10T09:30:31Z","modified":"2025-06-10T09:30:39Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:02:38.912983Z"}],"nvd":[{"id":"CVE-2025-5743","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\nvulnerability exists that could cause remote control over the charging station when an authenticated user\nmodifies configuration parameters on the web server.","status":"published","published":"2025-06-10T09:15:25.703Z","modified":"2026-06-17T09:48:40.49Z","cvss":[{"version":"4.0","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:11:11.4244Z"}]}}