Efacec vulnerabilities
We track 6 vulnerabilities in Efacec products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
Latest Efacec vulnerabilities
- 8.6 High severity
QC 60/90/120: Improper Privilege Management
The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions
- 8.9 High severity
An attacker with the ability to interact through the network and with access credentials…
An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications
- 9.2 Critical severity
QC 60/90/120: Uncontrolled Resource Consumption
An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.
- 8.2 High severity
QC 60/90/120: Uncontrolled Resource Consumption
The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
- 9.2 Critical severity
QC60/90/120: Uncontrolled Resource Consumption
The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
- 8.8 High severity
BCU 500: Cross-Site Request Forgery
A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.