Echarge vulnerabilities
We track 2 vulnerabilities in Echarge products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 24, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Echarge vulnerabilities
- 9.8 Critical severity
cph2_echarge_firmware: Insufficient Verification of Data Authenticity
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably
- 8.8 High severity
cph2_echarge_firmware: Improper Neutralization of Special Elements used in a Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.