Mennekes vulnerabilities
We track 5 vulnerabilities in Mennekes products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.
Latest Mennekes vulnerabilities
- 9.3 Critical severity
Amtron: Improper Privilege Management
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.
- 9.3 Critical severity
Amtron: Improper Authentication
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.
- 8.7 High severity
Smart / Premium charging stations: Improper Neutralization of Special Elements used in an OS Command
The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS.
- 8.7 High severity
Smart / Premium charging stations: Improper Neutralization of Special Elements used in an OS Command
The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.
- 8.7 High severity
Smart / Premium charging stations: Improper Neutralization of Special Elements used in an OS Command
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.