CVE-2025-22366

creationtimestamp| type| source ---|---|--- 2025-03-11 14:43:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144328855531757 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-22366

CVE-2025-22366 affects Mennekes Smart/Premium Chargingpoints firmware update capability. The issue is in the authenticated firmware update flow where OS commands are improperly neutralized when certain fields reach the underlying OS, enabling potential command execution. The documented impact (pe...

CVE-2025-22366 Mennekes smart/premium charges systems, Command injection in firmware upgrade

The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...