CVE-2025-54564

The ChargePoint Home Flex electric vehicle charging device, specifically version 5.5.4.13 , is vulnerable to command execution. The issue stems from a failure to validate a user-controlled string during bz2 decompression in the uploadsm component. This flaw allows an unauthenticated attacker to e...