CVE-2021-45418 Path traversal in n/a
Attackers can exploit a directory traversal vulnerability in Starcharge EV charging cabinets to read arbitrary files from the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-45418?
CVE-2021-45418 is a high-severity path traversal vulnerability in n/a, published on 22 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet <=1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium <=1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0.
Weakness: CWE-22
Which versions are affected by CVE-2021-45418?
It affects 2 products.
Products include Starcharge Nova 360 Cabinet Firmware, Starcharge Titan 180 Premium Firmware.
How do I fix CVE-2021-45418?
No fix has been published for CVE-2021-45418 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-45418 being exploited?
There is no known exploitation of CVE-2021-45418 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fw56-6pph-mv76.