Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Mennekes Smart / Premium charging stations — csirt.divd.nl/DIVD-2025-00003 Clear all filters
TI-2025-16270 CVE-2025-22366 · GHSA-67j5-jp3p-gcg4

Mennekes smart/premium charges systems, Command injection in firmware upgrade

Priority MEDIUM 41

The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250
TI-2025-16272 CVE-2025-22368 · GHSA-8v2j-3jg9-6qr6

Mennekes smart/premium charges systems, Command injection in sCU firmware update

Priority MEDIUM 41

The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250
TI-2025-16271 CVE-2025-22367 · GHSA-mxmx-r6p4-736h

Mennekes smart/premium charges systems, Command injection in time setting

Priority MEDIUM 41

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to th…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250