EUVD-2024-40401

Malicious code in bioql PyPI...

CVE-2024-43663

There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web...

CVE-2024-43653

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The binary does not seem to be used by the web interface,...

CVE-2024-43660 Arbitrary file download using <redacted>.sh

The CGI script .sh can be used to download any file on the filesystem. This issue affects Iocharger firmware for AC model chargers beforeversion 24120701. Likelihood: High, but credentials required. Impact: Critical – The script can be used to download any file on the filesystem, including...

CVE-2024-43652

CVE-2024-43652 affects Iocharger firmware for AC-model chargers older than 24120701. The issue is an Improper Neutralization of Special Elements used in a Command (Command Injection) that allows OS Command Injection as root, giving an attacker complete control over the charging station (files/ser...

CVE-2024-43657

Summary of CVE-2024-43657 (Iocharger firmware) : Affects AC model Iocharger firmware before 24120701. The issue is an improper neutralization of special elements in a firmware file, enabling OS command injection as root via the processing of a firmware upload. Attack requires a low-privileged acc...

PT-2025-2657 · Iocharger · Iocharger

Name of the Vulnerable Software and Affected Versions: Iocharger firmware for AC model chargers versions prior to 24120701 Description: The issue is related to improper neutralization of special elements used in a command, allowing OS command injection as root. This gives an attacker full control...