Skip to contentIocharger Firmware For Ac Models vulnerabilities
- iocharger firmware for ac modelsUsing the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.CVE-2024-436587.2 High
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationCVE-2024-436549.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationCVE-2024-436519.3 Critical
- iocharger firmware for ac modelsBuffer overflow in <redacted>.so leads to DoS of OCPP serviceCVE-2024-436617.1 High
- iocharger firmware for ac modelsArbitrary file download using <redacted>.shCVE-2024-436607.1 High
- iocharger firmware for ac modelsWhen uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which w…CVE-2024-436579.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationCVE-2024-436539.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameterCVE-2024-436499.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameterCVE-2024-436489.3 Critical
- iocharger firmware for ac modelsBuffer overflow vulnerabilities in CGI scripts lead to segfaultCVE-2024-436635.3 Medium
- iocharger firmware for ac modelsAuthenticated arbitrary file upload to /tmp/ and /tmp/upload/CVE-2024-436625.3 Medium
- iocharger firmware for ac modelsPlaintext default credentials in firmwareCVE-2024-436598.3 High
- iocharger firmware for ac modelsA backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code executio…CVE-2024-436569.3 Critical
- iocharger firmware for ac modelsAny authenticated users can execute OS commands as root using the <redacted>.sh CGI script.CVE-2024-436559.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationCVE-2024-436509.3 Critical