Vulnerability · Published Nov 24, 2024 · Assigned by ONEKEY

CVE-2024-11666Unauthenticated Remote Command Injection in eCharge Salia PLCC

Critical 9.0

In plain English

A critical-severity insufficient verification of data authenticity in cph2_echarge_firmware from hardy-barth. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).

Severity (CVSS 3.1)9.0Critical

Exploit odds (30 days)0.4%top 62.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an EV charger controller and eCharge infrastructure can execute arbitrary commands with elevated privileges on affected devices. This issue affects cph2_echarge_firmware: through 2.0.4.

Affected products (as reported)

Vendor	Product	Versions
hardy-barth	cph2_echarge_firmware	0 – through 2.0.4

Weakness: CWE-345 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

References

https://www.onekey.com/resource/critical-vulnerabilities-in-ev-charging-stations-analysis-of-echarge-controllers third-party-advisory