Read the docs

ChargePoint

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ChargePoint records in CISA KEV

No ChargePoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Home Flex Hardwired Firmware 6 records MEDIUM Home Flex Nema 14-50 Plug Firmware 6 records MEDIUM Home Flex Nema 6-50 Plug Firmware 6 records MEDIUM Home Flex Cph50 Firmware 3 records MEDIUM Home Flex Firmware 2 records LOW

Records

11 records

TI-2024-15946 CVE-2024-23971 · GHSA-v92x-m54x-rp94

ChargePoint Home Flex OCPP bswitch Command Injection

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00505 Published 2025-01-30 No fix listed CWE-77
TI-2024-15944 CVE-2024-23969 · GHSA-x854-759p-6c5g

ChargePoint Home Flex wlanchnllst Out-Of-Bounds Write

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00484 Published 2025-01-30 No fix listed CWE-787
TI-2024-15909 CVE-2024-23921 · GHSA-5f7v-6fjq-25wr

ChargePoint Home Flex Command Injection

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00506 Published 2025-01-31 No fix listed CWE-94
TI-2024-15908 CVE-2024-23920 · GHSA-fh4m-mf33-3fv8

ChargePoint Home Flex Improper Access Control

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00507 Published 2025-01-31 No fix listed CWE-284
TI-2026-03605 CVE-2026-4157 · GHSA-9r43-wfq5-rv33

OS command injection in ChargePoint Home Flex

Priority LOW 36

ChargePoint Home Flex revssh Service Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00855 Published 2026-04-11 No fix listed CWE-78
TI-2026-03604 CVE-2026-4156 · GHSA-93fc-f6pw-cp83

Stack-based buffer overflow in ChargePoint Home Flex

Priority LOW 35

ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00425 Published 2026-04-11 No fix listed CWE-121
TI-2024-15945 CVE-2024-23970 · GHSA-rx56-hv52-ppxp

ChargePoint Home Flex Improper Certificate Validation

Priority LOW 28

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00233 Published 2025-01-30 No fix listed CWE-295
TI-2024-06851 CVE-2024-7391 · GHSA-g9x7-qc89-39p9

Information disclosure in ChargePoint Home Flex

Priority LOW 26

ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00473 Published 2024-11-22 No fix listed CWE-200
Open these records in search →