Buffer Overflow Vulnerabilities in Iocharger AC Model Chargers by Iocharger

CVE-2024-43663

What is CVE-2024-43663?

Multiple buffer overflow vulnerabilities exist in various CGI binaries of Iocharger AC model chargers. Affected firmware versions include those prior to 24120701. These vulnerabilities can be exploited remotely over any network connection that the charging station’s web interface listens to. Exploiting these flaws could potentially lead to remote code execution, albeit requiring advanced technical skills due to mitigations like Address Space Layout Randomization (ASLR). While the immediate effect often results in a segmentation fault and a 502 Bad Gateway error, skilled attackers may leverage these vulnerabilities for more severe exploits. Notably, this issue does not pose a safety risk to the charging process.

References