Iocharger firmware for AC models vulnerabilities

13 known vulnerabilities in Iocharger firmware for AC models from Iocharger. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Iocharger firmware for AC models: Stack-based Buffer Overflow

  CVE-2024-43661Jan 9, 2025Iocharger

  The <redacted>.so library, which is used by <redacted>, is vulnerable to a buffer overflow in the code that handles the deletion of certificates. This buffer overflow can be triggered by providing a long file path to the <redacted> action of the <redacted>.exe

• 7.1 High severity

  Iocharger firmware for AC models: Files or Directories Accessible to External Parties

  CVE-2024-43660Jan 9, 2025Iocharger

  The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to downlo

• 8.3 High severity

  Iocharger firmware for AC models: Plaintext Storage of a Password

  CVE-2024-43659Jan 9, 2025Iocharger

  After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware vers

• 7.2 High severity

  Iocharger firmware for AC models: Path Traversal: 'dir/../../filename'

  CVE-2024-43658Jan 9, 2025Iocharger

  Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmware for AC model before firmware version 25010801. Likelihood: High, but requires authentication Impact:

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43657Jan 9, 2025IochargerEPSS 1.51%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: High. However, the attacker w

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43656Jan 9, 2025IochargerEPSS 1.52%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be diffic

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43655Jan 9, 2025IochargerEPSS 1.27%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The attacker will

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43654Jan 9, 2025IochargerEPSS 2.16%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 2501080

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43653Jan 9, 2025IochargerEPSS 2.16%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The <redacted> bin

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43651Jan 9, 2025IochargerEPSS 1.76%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The <redacted> binary does

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43650Jan 9, 2025IochargerEPSS 1.67%

  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The <redacted

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43649Jan 9, 2025IochargerEPSS 1.83%

  Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place f

• 9.3 Critical severity

  Iocharger firmware for AC models: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-43648Jan 9, 2025IochargerEPSS 1.87%

  Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for