CVE-2024-43648

Command injection in the parameter of a .exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an...

CVE-2024-43648 Authenticated command injection via <redacted>.exe <redacted> parameter

Command injection in the parameter of a .exe request leads to remote code execution as the root user. This issue affects Iocharger firmware for AC models before version 24120701. Likelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an...

CVE-2024-43648

CVE-2024-43648 affects Iocharger firmware for AC models before version 24120701. The issue is a command injection in the parameter of a .exe request, which results in remote code execution as the root user. This grants full control over the charging station, enabling arbitrary file/service addit...