CVE-2023-46359
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
An OS command injection vulnerability in Hardy Barth cPH2 eCharge charging station version 1.87.0 and earlier. An unauthenticated remote attacker can execute arbitrary commands on the system via specially crafted arguments passed to the connectivity check feature.
Risk Assessment
The risk for the organization includes full compromise of the charging station, potentially leading to network security breaches, data theft, or use of the device for further attacks.
Recommendation
Immediately update the charging station firmware to the latest available version and restrict access to the connectivity check feature to authorized users only.
Original NVD description (English source)
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.