Read the docs
TI-2024-29272 Aliases CVE-2024-43650GHSA-6x4w-74f8-5jjw

OS command injection in Iocharger firmware for AC models

Priority MEDIUM 45CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-250 and CWE-78.

Summary

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects  firmware versions before 24120701. Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the <redacted> binary, or convince a user with such access to execute a crafted HTTP request. Impact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services. CVSS clarification: The attack can be executed over any network connection serving the web interface (AV:N). There are no additional measures that need to be circumvented (AC:L) or attack preconditions (AT:N). THe attack is privileged, but the level does not matter (PR:L) and does not require user interaction (UI:N). Attack leads to full system compromised (VC:H/VI:H/VA:H) and compromised devices can be used to "pivot" to other networks that should be unreachable (SC:L/SI:L/SA:H). Because this an EV charger using high power, there is a potential safety impact (S:P). The attack can be automated (AU:Y).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01674 76th percentileScored 2026-11-07
Fix Fixed Iocharger firmware for AC models (Iocharger): 24120701

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IochargerIocharger firmware for AC modelsbefore 2412070124120701Patch availableCNA
  • Iocharger firmware for AC models VendorIocharger Affected before 24120701 Fixed in 24120701 Patch available CNA

Remediation

  • Fix · CNA Iocharger firmware for AC models (Iocharger) Fixed in 24120701

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Iocharger firmware for AC models 24120701

    11 records Highest priority Priority MEDIUM 8 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2024-29275 OS command injection in Iocharger firmware for AC modelsPriority MEDIUM 46
    • TI-2024-29273 OS command injection in Iocharger firmware for AC modelsPriority MEDIUM 46
    • TI-2024-29271 Authenticated command injection via <redacted>.exe <redacted> parameterPriority MEDIUM 46
    Show all 11 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-43650
  2. 2026-10-03 Alias added: GHSA-6x4w-74f8-5jjw

References

Advisory 2

Other 1

  • TI-2024-29276 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29275 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29274 OS command injection in Iocharger firmware for AC chargers CVSS 4.0CRITICAL 9.3
  • TI-2024-29273 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29271 Authenticated command injection via <redacted>.exe <redacted> parameter CVSS 4.0CRITICAL 9.3
  • TI-2024-29270 Authenticated command injection via <redacted>.exe <redacted> parameter CVSS 4.0CRITICAL 9.3
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences