CVE-2024-43650

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The binary does not seem to be used by the web...

CVE-2024-43650 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The binary does not seem to be used by the web...

CVE-2024-43650

CVE-2024-43650 affects Iocharger firmware for AC models prior to 24120701. The vulnerability is an authenticated command injection caused by improper neutralization of a special element used in a command, enabling OS command execution as root. The attack can be conducted over the web interface vi...