Iocharger vulnerabilities

Products

• Firmware For Ac Models 15

Newest

• iocharger firmware for ac models Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal. CVE-2024-43658 7.2 HighJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station CVE-2024-43654 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station CVE-2024-43651 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Buffer overflow in <redacted>.so leads to DoS of OCPP service CVE-2024-43661 7.1 HighJanuary 9, 2025
• iocharger firmware for ac models Arbitrary file download using <redacted>.sh CVE-2024-43660 7.1 HighJanuary 9, 2025
• iocharger firmware for ac models When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which w… CVE-2024-43657 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station CVE-2024-43653 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac chargers Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station CVE-2024-43652 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection via <redacted>.exe <redacted> parameter CVE-2024-43649 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection via <redacted>.exe <redacted> parameter CVE-2024-43648 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Buffer overflow vulnerabilities in CGI scripts lead to segfault CVE-2024-43663 5.3 MediumJanuary 9, 2025
• iocharger firmware for ac models Authenticated arbitrary file upload to /tmp/ and /tmp/upload/ CVE-2024-43662 5.3 MediumJanuary 9, 2025
• iocharger firmware for ac models Plaintext default credentials in firmware CVE-2024-43659 8.3 HighJanuary 9, 2025
• iocharger firmware for ac models A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code executio… CVE-2024-43656 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script. CVE-2024-43655 9.3 CriticalJanuary 9, 2025
• iocharger firmware for ac models Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station CVE-2024-43650 9.3 CriticalJanuary 9, 2025