Description (CNA)
The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/
- https://seclists.org/fulldisclosure/2024/Mar/33
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.