CVE-2024-11665 — Unauthenticated Remote Command Injection

CVE-2024-11665

Unauthenticated Remote Command Injection PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.

Affected (CNA)

Vendor / product	Versions
hardy-barth / cph2_echarge_firmware	affected 0 through 2.0.4

CWE

CWE-77

References

https://www.onekey.com/resource/critical-vulnerabilities-in-ev-charging-stations-analysis-of-echarge-controllers

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.