Command Injection Vulnerability in Iocharger Firmware for AC Model Chargers

CVE-2024-43655

Summary

A command injection vulnerability exists in the Iocharger firmware for AC model chargers, which can allow an attacker with low privileges to execute arbitrary commands as the root user. By exploiting this flaw, attackers can gain full control over the device, enabling them to add, modify, or delete files and services. The vulnerability primarily affects instances where an attacker can identify the script name and leverage a low-privileged account to initiate the attack. Given that this vulnerability can potentially lead to unauthorized access to critical systems and may affect the functionality and safety of electric vehicle charging stations, immediate attention and remediation are strongly advised.

References