CVE-2025-22367

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS...

CVE-2025-22367

creationtimestamp| type| source ---|---|--- 2025-03-11 14:43:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144328855531757 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-22367

The CVE-2025-22367 affects Mennekes Smart/Premium Chargingpoints firmware. The issue arises from theAuthenticated time setting capability, where OS commands are not properly neutralized when certain fields reach the underlying OS, enabling potential command execution. Documented in Multiple sourc...