Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Iocharger firmware for AC models 25010801 Clear all filters
TI-2024-29276 CVE-2024-43654 · GHSA-938g-xvcv-qg4g

OS command injection in Iocharger firmware for AC models

Priority MEDIUM 46

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root This issue affects all Iocharger AC EV charger mod…

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.02158 Published 2025-01-09 Fixed in 25010801 CWE-250
TI-2024-29281 CVE-2024-43659 · GHSA-qxc8-hg93-pqh7

Plaintext default credentials in firmware

Priority MEDIUM 40

After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers.

CVSS 4.0HIGH 8.3 Local High privileges No interaction EPSS 0.00842 Published 2025-01-09 Fixed in 25010801 CWE-1391