EUVD-2024-40401

Malicious code in bioql PyPI...

CVE-2024-43663

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...

CVE-2024-43653

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The binary does not seem to be used by the web interface,...

CVE-2024-43657

Summary of CVE-2024-43657 (Iocharger firmware) : Affects AC model Iocharger firmware before 24120701. The issue is an improper neutralization of special elements in a firmware file, enabling OS command injection as root via the processing of a firmware upload. Attack requires a low-privileged acc...

CVE-2024-43652

CVE-2024-43652 affects Iocharger firmware for AC-model chargers older than 24120701. The issue is an Improper Neutralization of Special Elements used in a Command (Command Injection) that allows OS Command Injection as root, giving an attacker complete control over the charging station (files/ser...

CVE-2024-43660 Arbitrary file download using <redacted>.sh

The CGI script .sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to download any file on the filesystem, including...

CVE-2024-43653: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The binary does not seem to be used by the web interface,...

PT-2025-2654

Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC model chargers versions prior to 24120701 Description The issue is related to an improper neutralization of special elements used in a command, allowing OS command injection as root. This gives an attacker full contro...

CVE-2024-43655: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The attacker will first need to find the name of the...

PT-2025-2664

Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC model chargers versions prior to 24120701 Description The issue is related to multiple buffer overflow vulnerabilities present in several CGI binaries of the charging station. These vulnerabilities can cause a...

CVE-2024-43652: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The binary does not seem to be used by the web interface, ...

CVE-2024-43663: Stack-based Buffer Overflow

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...

PT-2025-2661

Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC model chargers versions prior to 24120701 Description The issue allows an attacker to download any file on the filesystem using the CGI script. This has a critical impact, as sensitive files such as /etc/shadow, the C...

PT-2025-2656

Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC model chargers versions prior to 24120701 Description The issue is related to an improper neutralization of special elements used in a command, allowing OS command injection as root. This gives an attacker full contro...

PT-2025-2657 · Iocharger · Iocharger

Name of the Vulnerable Software and Affected Versions: Iocharger firmware for AC model chargers versions prior to 24120701 Description: The issue is related to improper neutralization of special elements used in a command, allowing OS command injection as root. This gives an attacker full control...