CVE-2024-43651

creationtimestamp| type| source ---|---|--- 2025-01-09 08:02:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113797350858864367 2025-01-09 08:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcag34pmy25 2025-01-09 10:14:02+00:00| seen|...

CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...

CVE-2024-43651

CVE-2024-43651 affects Iocharger charging stations running AC firmware prior to 241207101. The flaw is due to improper neutralization of special elements in a command, enabling authenticated OS command injection as root when a crafted HTTP request is processed. Affected component is linked to the...