830 matches found
The vulnerability of the microprogrammed software in modular controller devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, CHARX SEC-3000, arises from insecure resource initialization. This allows a hacker to bypass the password protection of arbitrary users.
The vulnerability of the microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to an unsafe initialization of resources. Exploiting this vulnerability could allow a malicious actor to reset t...
CVE-2024-23959
Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations...
CVE-2024-23958 Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability
Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not requir...
Autel Energy MaxiCharger AC Elite Business C50 安全漏洞
Autel Energy MaxiCharger AC Elite Business C50 is a car charger from Autel Energy USA. A security vulnerability exists in the Autel Energy MaxiCharger AC Elite Business C50 that stems from a stack-based buffer overflow issue contained in the BLE AppChargingControl...
The vulnerability of Bluetooth modules in charging devices for electric vehicles like Autel, ShargerPoint, and JuiceBox allows a violator to execute arbitrary code.
The vulnerability of Bluetooth modules in charging devices for electric vehicles, such as Autel, ShargerPoint, and JuiceBox, is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
(0Day) (Pwn2Own) ChargePoint Home Flex onboardee Improper Access Control Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper...
CVE-2022-48819 tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case
In the Linux kernel, the following vulnerability has been resolved: tcp: take care of mixed splice/sendmsgMSGZEROCOPY case syzbot found that mixing sendpage and sendmsgMSGZEROCOPY calls over the same TCP socket would again trigger the infamous warning in inetsockdestruct WARNONskforwardallocgetsk...
CVE-2024-37310
EVerest is an EV charging software stack. An integer overflow in the "v2gincomingv2gtp" function in the v2gserver.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0...
CVE-2024-37310 EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
EVerest is an EV charging software stack. An integer overflow in the "v2gincomingv2gtp" function in the v2gserver.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0...
CVE-2024-37310
CVE-2024-37310 affects the EVerest EV charging stack (everest-core). A heap overflow due to an integer overflow in the v2g_incoming_v2gtp function of v2g_server.cpp can be triggered remotely. Concrete details: impact is a heap overflow with potential extreme consequences as per the CVE entry; fix...
CVE-2024-37310 EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
EVerest is an EV charging software stack. An integer overflow in the "v2gincomingv2gtp" function in the v2gserver.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0...
CVE-2024-37310 EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
EVerest is an EV charging software stack. An integer overflow in the "v2gincomingv2gtp" function in the v2gserver.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0...
PT-2024-20200 · Autel · Autel Maxicharger Ac Elite Business C50
Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Elite Business C50 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations...
CVE-2024-4622
If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator...
PT-2024-31925 · Alpitronic · Alpitronic Hypercharger Ev Charging Devices
Name of the Vulnerable Software and Affected Versions: alpitronic Hypercharger EV charging devices affected versions not specified Description: The issue concerns alpitronic Hypercharger EV charging devices that can expose a web interface protected by authentication if misconfigured. If the defau...
alpitronic Hypercharger EV charger
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: alpitronic Equipment: Hypercharger EV charger Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker disabling...
CVE-2020-8006
The server in Circontrol Raption through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The ocpp1.5 and pwrstudio binaries on the charging station do not use a number of common exploitation mitigations. In...
Circontrol Raption Server 缓冲区错误漏洞
Circontrol Raption Server is a charging station management software from Circontrol. It is designed for electric vehicle charging infrastructures and is intended to help charging station managers monitor, control, and manage charging equipment, as well as provide user and device data analysis and...
Circontrol Raption Server 缓冲区错误漏洞
Circontrol Raption Server is a charging station management software from Circontrol. It is designed for electric vehicle charging infrastructures and is intended to help charging station managers monitor, control, and manage charging equipment, as well as provide user and device data analysis and...