PT-2024-17175 · Unknown · Cph2 Echarge Firmware

Quentin Kaiser · Published 2024-11-24 · Updated 2024-12-04 · CVE-2024-11665

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cph2 echarge firmware versions through 2.0.4

Description The issue affects the cph2 echarge firmware, allowing OS Command Injection due to an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.

Recommendations For versions through 2.0.4, update to version 2.0.5 to stay secure against the Command Injection threat.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-11665

Affected Products

Cph2 Echarge Firmware

References · 8

• 🔥 https://onekey.com/resource/critical-vulnerabilities-in-ev-charging-stations-analysis-of-echarge-controllers · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-11665 · Security Note
• https://osv.dev/vulnerability/CVE-2024-11665 · Vendor Advisory
• https://twitter.com/CVEnew/status/1860818536559702106 · Twitter Post
• https://t.me/cvenotify/103041 · Telegram Post
• https://twitter.com/CveFindCom/status/1860821472874246630 · Twitter Post
• https://t.me/cvenotify/102479 · Telegram Post
• https://t.me/cvenotify/102476 · Telegram Post