CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...

CVE-2024-43651

CVE-2024-43651 affects Iocharger charging stations running AC firmware prior to 241207101. The flaw is due to improper neutralization of special elements in a command, enabling authenticated OS command injection as root when a crafted HTTP request is processed. Affected component is linked to the...

CVE-2024-43652 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The binary does not seem to be used by the web interface, ...

CVE-2024-43652 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The binary does not seem to be used by the web interface, ...

CVE-2024-43650 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects firmware versions before 24120701. Likelihood: Moderate – The binary does not seem to be used by the web...

CVE-2024-43655

CVE-2024-43655 affects Iocharger AC model firmware prior to 24120701. The issue is an unauthenticated? Actually authenticated: the CVSS notes say the attack is authenticated via a web UI; but here other sources say any authenticated user can execute OS commands as root. The vulnerability is a Com...

CVE-2024-7696

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit l...

CVE-2024-7696

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit l...

CVE-2024-7696

AXIS Camera Station Pro vulnerability CVE-2024-7696: An authenticated malicious client can tamper with audit log creation or trigger a Denial-of-Service against the AXIS Camera Station server by sending maliciously crafted audit log entries. The issue affects AXIS Camera Station Pro prior to the ...

CVE-2024-7696

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit l...

AXIS Camera Station Pro 安全漏洞

AXIS Camera Station Pro is a powerful and flexible video management and access control from Axis Sweden. A security vulnerability exists in AXIS Camera Station Pro versions prior to 6.5, which originates from an authenticated malicious client that can tamper with audit log creation or perform a...

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...

CVE-2024-20154

MediaTek Modem vulnerability CVE-2024-20154 arises from an out-of-bounds write due to a missing bounds check in the Modem component. This can lead to remote code execution when a UE connects to a rogue base station, with no additional execution privileges required and no user interaction. Affecte...

PT-2025-2277 · Unknown · Wlan Sta Fw

Name of the Vulnerable Software and Affected Versions: wlan STA FW affected versions not specified Description: In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in MediaTek Chipsets, which originates from the wlan STA module that could potentially trick a client into connecting to an AP with a spoofed SSID...

DaaS: 2411 VDAs are not registering with the Cloud Connectors

When users are trying to launch the published resource getting an error - "No work Station Available", as the VDA is in unregistered state...

PT-2025-34405

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where TDLS Tunnel Direct Link Setup operations were not properly rejected when a station was not associated. Specifically, a warning occurred in the...

CVE-2024-54082

home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an administrative user...

CVE-2024-54082

The CVE-2024-54082 issue affects SHARP-driven home/router devices (home 5G HR02 and Wi‑Fi STATION SH-54C). It is an OS command injection in the configuration restore function that can allow an administrator to execute arbitrary commands with root privileges. Affected versions include home 5G HR02...

CVE-2024-54082

home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore function. An arbitrary OS command may be executed with the root privilege by an administrative user...