Command Injection Vulnerability in Iocharger Firmware for AC Model Chargers

CVE-2024-43656

What is CVE-2024-43656?

This vulnerability pertains to the Iocharger firmware for AC model chargers, allowing attackers to exploit improper neutralization of special elements utilized in commands. An attacker can achieve OS command injection with root privileges, leading to full control over the charger. Though it may be challenging to identify and exploit the vulnerabilities due to the file structure and necessary user account permissions, successful exploitation can result in unauthorized modifications, deletions, and addition of files and services. This could compromise not only the charging station itself but also allow intruders to access broader network areas, posing significant security and safety risks.

References