Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Mennekes Clear all filters
TI-2026-07897 CVE-2026-8980 · GHSA-x43w-f99f-mhc7

Privilege escalation in Mennekes Amtron

Priority HIGH 75

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00517 Published 2026-05-28 No fix listed CWE-269
TI-2026-07896 CVE-2026-8979 · GHSA-m7v3-p7g2-xh6x

Authentication bypass in Mennekes Amtron

Priority HIGH 75

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00784 Published 2026-05-28 No fix listed CWE-287
TI-2025-16270 CVE-2025-22366 · GHSA-67j5-jp3p-gcg4

Mennekes smart/premium charges systems, Command injection in firmware upgrade

Priority MEDIUM 41

The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250
TI-2025-16272 CVE-2025-22368 · GHSA-8v2j-3jg9-6qr6

Mennekes smart/premium charges systems, Command injection in sCU firmware update

Priority MEDIUM 41

The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250
TI-2025-16271 CVE-2025-22367 · GHSA-mxmx-r6p4-736h

Mennekes smart/premium charges systems, Command injection in time setting

Priority MEDIUM 41

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to th…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00647 Published 2025-03-11 Fixed in 2.15 CWE-250