Iocharger vulnerabilities
We track 14 vulnerabilities in Iocharger products across 2 products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on January 9, 2025.
Latest Iocharger vulnerabilities
- 7.1 High severity
Iocharger firmware for AC models: Stack-based Buffer Overflow
The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the deletion of certificates. This buffer overflow can be triggered by providing a long file path to the <redacted> action of the <redacted>.exe
- 7.1 High severity
Iocharger firmware for AC models: Files or Directories Accessible to External Parties
The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to downlo
- 8.3 High severity
Iocharger firmware for AC models: Plaintext Storage of a Password
After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware vers
- 7.2 High severity
Iocharger firmware for AC models: Path Traversal: 'dir/../../filename'
Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmware for AC model before firmware version 25010801. Likelihood: High, but requires authentication Impact:
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: High. However, the attacker w
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be diffic
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The attacker will
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 2501080
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The <redacted> bin
- 9.3 Critical severity
Iocharger firmware for AC chargers: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The <redacted> bina
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The <redacted> binary does
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The <redacted
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place f
- 9.3 Critical severity
Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command
Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for