458 matches found
CVE-2025-31950
An unauthenticated attacker can obtain EV charger energy consumption information of other users...
CVE-2025-27575
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID...
CVE-2025-31147 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...
CVE-2025-27575 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID...
CVE-2025-27575 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID...
CVE-2025-27575
Consolidated details from connected sources show a vulnerability affecting Growatt Cloud Applications (EV charger management) that allows an unauthenticated attacker to learn the EV charger version and firmware upgrading history by knowing the charger ID. Root cause appears to be information disc...
CVE-2025-26857
CVE-2025-26857 affects Growatt Cloud Applications (vulnerable through 3.6.0 and earlier according to CNNVD). The flaw allows an unauthenticated attacker to rename arbitrary devices owned by any user (notably EV chargers) by exploiting insufficient input validation. Multiple connected sources (Red...
PT-2025-16487
Name of the Vulnerable Software and Affected Versions EV charger affected versions not specified Description An unauthenticated attacker can obtain the EV charger version and firmware upgrading history by knowing the charger ID. Recommendations At the moment, there is no information about a newer...
PT-2025-16484
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can rename arbitrary devices of arbitrary users, specifically EV chargers. Recommendations At the moment, there is no information about a newer version that contains ...
CVE-2024-43661
The .so library, which is used by , is vulnerable to a buffer overflow in the code that handles the deletion of certificates. This buffer overflow can be triggered by providing a long file path to the action of the .exe CGI binary or to the .sh CGI script. This binary or script will write this fi...
CVE-2024-43654
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 25010801. Likelihood: Moderate – The binary do...
CVE-2024-43659
CVE-2024-43659 affects Iocharger AC-model EV chargers running firmware prior to 25010801. The issue involves a file (redacted path) accessible after gaining firmware access, enabling retrieval of default credentials that are identical across all AC chargers. The vulnerability enables login with t...
CVE-2024-43659 Plaintext default credentials in firmware
After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers. This issue affects Iocharger firmware for AC models before firmware version 25010801. The issue is addressed by requirin...
CVE-2024-43654: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger models on a firmware version before 25010801. Likelihood: Moderate – The binary do...
iocharger 安全漏洞
iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. A security vulnerability exists in iocharger. An attacker could exploit the vulnerability to obtain the default credentials that apply to all Iocharger AC model EV...
SMA Solar多款产品 SQL注入漏洞
SMA Solar Sunny Central SC 1760-US and others are a solar inverter from SMA Solar, Germany. A SQL injection vulnerability exists in various SMA Solar products. An attacker could exploit the vulnerability to gain read and write access to device-specific log files. The following products are...
CVE-2020-8007
The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...
CVE-2020-8007: Improper Neutralization of Special Elements used in an OS Command
The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...
CVE-2020-8007
The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...
