CVE-2024-5684

🗓️ 06 Jun 2024 12:54:09Reported by ASRGType

Vulnerability in JWT-library authentication allows bypassing password authentication and gaining full access as a user

Reporter	Title	Published	Views	Family All 6
CNNVD	ID Charger Security Vulnerability	6 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-5684 ID Charger Connect & Pro - JWT-Null-Algorithm	6 Jun 202412:54	–	cvelist
EUVD	EUVD-2024-46857	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5684	6 Jun 202413:15	–	nvd
RedhatCVE	CVE-2024-5684	23 May 202508:31	–	redhatcve
Vulnrichment	CVE-2024-5684 ID Charger Connect & Pro - JWT-Null-Algorithm	6 Jun 202412:54	–	vulnrichment

NVD

Node

vw id.charger_connect_firmwareMatchspr3.2beta

vw id.charger_connect_firmwareMatchspr3.51

vw id.charger_connect_firmwareMatchspr3.52

AND

vw id.charger_connectMatch-

Node

vw id.charger_pro_firmwareMatchspr3.2beta

vw id.charger_pro_firmwareMatchspr3.51

vw id.charger_pro_firmwareMatchspr3.52

AND

vw id.charger_proMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ID Charger Connect & Pro",
    "vendor": "Volkswagen Group Charging GmbH - Elli, EVBox",
    "versions": [
      {
        "status": "affected",
        "version": "SPR3.2B"
      },
      {
        "status": "affected",
        "version": "SPR3.51"
      },
      {
        "status": "affected",
        "version": "SPR3.52"
      }
    ]
  }
]

Source	Link
asrg	www.asrg.io/security-advisories/vulnerability-in-id-charger-connect-and-pro-from-volkswagen-group-charging-gmbh-elli-evbox-versions-spr3-2b-spr3-51-and-spr3-52/

21 Nov 2024 09:48Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.3 - 8.8

EPSS0.00023

SSVC

CWE-345