| CVE-2025-25268 |
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-24006 |
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges…
|
7.8
High
|
Jul 8, 2025 |
| CVE-2025-24005 |
A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due…
|
7.8
High
|
Jul 8, 2025 |
| CVE-2025-24004 |
A physical attacker with access to the device display via USB-C can send a message to the device which triggers an…
|
5.2
Medium
|
Jul 8, 2025 |
| CVE-2025-24003 |
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations…
|
8.2
High
|
Jul 8, 2025 |
| CVE-2025-24002 |
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German…
|
5.3
Medium
|
Jul 8, 2025 |
| CVE-2024-11497 |
An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access
|
8.8
High
|
Jan 14, 2025 |
| CVE-2024-6788 |
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the…
|
8.6
High
|
Aug 13, 2024 |
| CVE-2024-28137 |
A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU…
|
7.8
High
|
May 14, 2024 |
| CVE-2024-28136 |
A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper…
|
7.8
High
|
May 14, 2024 |
| CVE-2024-28135 |
A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code…
|
5.0
Medium
|
May 14, 2024 |
| CVE-2024-28134 |
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access…
|
7.0
High
|
May 14, 2024 |
| CVE-2024-28133 |
A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root
privileges.
|
7.8
High
|
May 14, 2024 |
| CVE-2024-26288 |
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a…
|
8.7
High
|
Mar 12, 2024 |
| CVE-2024-26005 |
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service…
|
4.8
Medium
|
Mar 12, 2024 |
| CVE-2024-26004 |
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or…
|
7.5
High
|
Mar 12, 2024 |
| CVE-2024-26003 |
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt…
|
7.5
High
|
Mar 12, 2024 |
| CVE-2024-26002 |
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by…
|
7.8
High
|
Mar 12, 2024 |
| CVE-2024-26001 |
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack
|
7.4
High
|
Mar 12, 2024 |
| CVE-2024-26000 |
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The…
|
5.9
Medium
|
Mar 12, 2024 |
| CVE-2024-25999 |
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP…
|
8.4
High
|
Mar 12, 2024 |
| CVE-2024-25998 |
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to…
|
7.3
High
|
Mar 12, 2024 |
| CVE-2024-25997 |
An unauthenticated remote attacker can perform a log injection due to improper input validation
|
5.3
Medium
|
Mar 12, 2024 |
| CVE-2024-25996 |
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error
|
5.3
Medium
|
Mar 12, 2024 |
| CVE-2024-25995 |
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or…
|
9.8
Critical
|
Mar 12, 2024 |