DC-80 vulnerabilities
6 known vulnerabilities in DC-80 from EVbee. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
DC 80: Use of Weak Credentials
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network.
- 9.3 Critical severity
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file…
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwrit
- 8.6 High severity
DC-80: Improper Neutralization of Special Elements used in an OS Command
The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
- 8.7 High severity
DC-80: Improper Authentication
The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.
- 9.3 Critical severity
DC-80: Improper Verification of Cryptographic Signature
The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.
- 9.3 Critical severity
DC-80: Missing Authentication for Critical Functionality
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints.