CVE-2024-43662

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcah3cda727 2025-01-09 08:47:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113797528009031838 2025-01-09 10:13:51+00:00| seen|...

CVE-2024-43662

CVE-2024-43662 affects Iocharger firmware for AC models prior to 24120701. A .exe CGI binary, accessible only to iocadmin users, can upload arbitrary files to /tmp/upload/ or /tmp/ as any user. Exploitation requires knowledge of the CGI binary and a low-privilege account to access it and perform ...