Read the docs

ChargePoint

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ChargePoint records in CISA KEV

No ChargePoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Home Flex Hardwired Firmware 6 records MEDIUM Home Flex Nema 14-50 Plug Firmware 6 records MEDIUM Home Flex Nema 6-50 Plug Firmware 6 records MEDIUM Home Flex Cph50 Firmware 3 records MEDIUM Home Flex Firmware 2 records LOW

Records

6 records in Home Flex Hardwired Firmware · all components

TI-2024-15946 CVE-2024-23971 · GHSA-v92x-m54x-rp94

ChargePoint Home Flex OCPP bswitch Command Injection

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00505 Published 2025-01-30 No fix listed CWE-77
TI-2024-15944 CVE-2024-23969 · GHSA-x854-759p-6c5g

ChargePoint Home Flex wlanchnllst Out-Of-Bounds Write

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00484 Published 2025-01-30 No fix listed CWE-787
TI-2024-15909 CVE-2024-23921 · GHSA-5f7v-6fjq-25wr

ChargePoint Home Flex Command Injection

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00506 Published 2025-01-31 No fix listed CWE-94
TI-2024-15908 CVE-2024-23920 · GHSA-fh4m-mf33-3fv8

ChargePoint Home Flex Improper Access Control

Priority MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00507 Published 2025-01-31 No fix listed CWE-284
TI-2024-15945 CVE-2024-23970 · GHSA-rx56-hv52-ppxp

ChargePoint Home Flex Improper Certificate Validation

Priority LOW 28

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00233 Published 2025-01-30 No fix listed CWE-295
Open these records in search →