19 matches found
EUVD-2024-40392
Malicious code in bioql PyPI...
EUVD-2024-40403
Malicious code in bioql PyPI...
EUVD-2024-40406
Malicious code in bioql PyPI...
CVE-2024-43650
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The binary does not seem to be used by the web...
CVE-2024-43654 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 25010801. Likelihood: Moderate – The binary do...
CVE-2024-43659 Plaintext default credentials in firmware
After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...
CVE-2024-43662
CVE-2024-43662 affects Iocharger firmware for AC models prior to 24120701. A .exe CGI binary, accessible only to iocadmin users, can upload arbitrary files to /tmp/upload/ or /tmp/ as any user. Exploitation requires knowledge of the CGI binary and a low-privilege account to access it and perform ...
CVE-2024-43662 Authenticated arbitrary file upload to /tmp/ and /tmp/upload/
The .exe or .exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderat...
PT-2025-2652
Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC models versions prior to 241207101 Description The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability, which allows OS Command...
PT-2025-2660
Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC models versions prior to 25010801 Description The issue allows an attacker to obtain default credentials that are the same across all Iocharger AC model EV chargers by accessing a file after gaining access to the...
PT-2025-2655
Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC models versions prior to 25010801 Description The issue is related to an improper neutralization of special elements used in a command, allowing OS command injection as root. This gives an attacker full control over t...
PT-2025-2651 · Iocharger · Iocharger
Name of the Vulnerable Software and Affected Versions: Iocharger firmware for AC models versions prior to 24120701 Description: The issue is related to an improper neutralization of special elements used in a command, also known as 'Command Injection', which allows OS Command Injection as root...
CVE-2024-43649: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection in the filename of a .exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur...
CVE-2024-43648: Improper Neutralization of Special Elements used in an OS Command
Command injection in the parameter of a .exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an...
CVE-2024-43662: Unrestricted Upload of File with Dangerous Type
The .exe or .exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderat...
CVE-2024-43650: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The binary does not seem to be used by the web...
CVE-2024-43651: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...
PT-2025-2650
Name of the Vulnerable Software and Affected Versions Iocharger firmware for AC models versions prior to 24120701 Description The issue is related to authenticated command injection in the filename of a certain .exe request, leading to remote code execution as the root user. This allows an attack...
