QC 60/90/120 vulnerabilities
4 known vulnerabilities in QC 60/90/120 from Efacec. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.6 High severity
QC 60/90/120: Improper Privilege Management
The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions
- 8.9 High severity
An attacker with the ability to interact through the network and with access credentials…
An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications protocol, write on the server topics of the board that controls the MQTT communications
- 9.2 Critical severity
QC 60/90/120: Uncontrolled Resource Consumption
An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.
- 8.2 High severity
QC 60/90/120: Uncontrolled Resource Consumption
The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.