agentprime: iocharger-firmware-for-ac-modelsEvery new CVE for iocharger-firmware-for-ac-models.https://agentprime.io/CVE-2024-43651: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationhttps://agentprime.io/advisories/CVE-2024-43651/https://agentprime.io/advisories/CVE-2024-43651/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:47 GMTCVEcriticalCVE-2024-43658: Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.https://agentprime.io/advisories/CVE-2024-43658/https://agentprime.io/advisories/CVE-2024-43658/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:47 GMTCVECVE-2024-43654: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationhttps://agentprime.io/advisories/CVE-2024-43654/https://agentprime.io/advisories/CVE-2024-43654/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:47 GMTCVEcriticalCVE-2024-43649: Authenticated command injection via <redacted>.exe <redacted> parameterhttps://agentprime.io/advisories/CVE-2024-43649/https://agentprime.io/advisories/CVE-2024-43649/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVEcriticalCVE-2024-43660: Arbitrary file download using <redacted>.shhttps://agentprime.io/advisories/CVE-2024-43660/https://agentprime.io/advisories/CVE-2024-43660/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVECVE-2024-43653: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationhttps://agentprime.io/advisories/CVE-2024-43653/https://agentprime.io/advisories/CVE-2024-43653/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVEcriticalCVE-2024-43661: Buffer overflow in <redacted>.so leads to DoS of OCPP servicehttps://agentprime.io/advisories/CVE-2024-43661/https://agentprime.io/advisories/CVE-2024-43661/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVECVE-2024-43657: When uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which…https://agentprime.io/advisories/CVE-2024-43657/https://agentprime.io/advisories/CVE-2024-43657/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVEcriticalCVE-2024-43648: Authenticated command injection via <redacted>.exe <redacted> parameterhttps://agentprime.io/advisories/CVE-2024-43648/https://agentprime.io/advisories/CVE-2024-43648/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:46 GMTCVEcriticalCVE-2024-43663: Buffer overflow vulnerabilities in CGI scripts lead to segfaulthttps://agentprime.io/advisories/CVE-2024-43663/https://agentprime.io/advisories/CVE-2024-43663/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVECVE-2024-43659: Plaintext default credentials in firmwarehttps://agentprime.io/advisories/CVE-2024-43659/https://agentprime.io/advisories/CVE-2024-43659/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVECVE-2024-43656: A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code executi…https://agentprime.io/advisories/CVE-2024-43656/https://agentprime.io/advisories/CVE-2024-43656/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVEcriticalCVE-2024-43662: Authenticated arbitrary file upload to /tmp/ and /tmp/upload/https://agentprime.io/advisories/CVE-2024-43662/https://agentprime.io/advisories/CVE-2024-43662/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVECVE-2024-43650: Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging stationhttps://agentprime.io/advisories/CVE-2024-43650/https://agentprime.io/advisories/CVE-2024-43650/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVEcriticalCVE-2024-43655: Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script.https://agentprime.io/advisories/CVE-2024-43655/https://agentprime.io/advisories/CVE-2024-43655/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jan 2025 07:56:45 GMTCVEcritical