Read the docs
TI-2024-29274 Aliases CVE-2024-43652GHSA-wpcm-3jpv-h3x5

OS command injection in Iocharger firmware for AC chargers

Priority MEDIUM 46CWE-250Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-250 and CWE-78.

Summary

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701 Likelihood: Moderate – The <redacted> binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the <redacted> binary, or convince a user with such access to execute a crafted HTTP request. Impact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01992 80th percentileScored 2026-11-07
Fix Fixed Iocharger firmware for AC chargers (Iocharger): 24120701

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IochargerIocharger firmware for AC chargersbefore 2412070124120701Patch availableCNA
  • Iocharger firmware for AC chargers VendorIocharger Affected before 24120701 Fixed in 24120701 Patch available CNA

Remediation

  • Fix · CNA Iocharger firmware for AC chargers (Iocharger) Fixed in 24120701

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-43652
  2. 2026-10-03 Alias added: GHSA-wpcm-3jpv-h3x5

References

Advisory 2

Other 1

  • TI-2024-29276 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29275 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29273 OS command injection in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
  • TI-2024-29271 Authenticated command injection via <redacted>.exe <redacted> parameter CVSS 4.0CRITICAL 9.3
  • TI-2024-29270 Authenticated command injection via <redacted>.exe <redacted> parameter CVSS 4.0CRITICAL 9.3
  • TI-2024-29279 Unrestricted file upload in Iocharger firmware for AC models CVSS 4.0CRITICAL 9.3
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences