Command Injection Vulnerability Can Lead to Root Privileges

CVE-2024-28136

What is CVE-2024-28136?

A command injection vulnerability in the OCPP Remote Service can be exploited by local attackers with low privileges. This security flaw arises from inadequate input validation processes, enabling attackers to execute arbitrary commands that can lead to root privilege escalation. Organizations using the OCPP Remote Service should implement necessary patches and review their input validation mechanisms to mitigate potential security risks associated with this vulnerability.

References