Command Injection Vulnerability in Iocharger Firmware for AC Model Chargers

CVE-2024-43652

What is CVE-2024-43652?

A command injection vulnerability present in the Iocharger firmware for AC model chargers prior to version 24120701 allows an attacker to execute arbitrary commands with root privileges. This vulnerability necessitates that an attacker has low-level access and can exploit a crafted HTTP request, making it moderately accessible. If exploited, this issue grants the attacker full control over the charging station, enabling them to add, modify, or delete files and services, potentially compromising the overall security of the system.

References