CVE-2024-11666 Unauthenticated Remote Command Injection in eCharge Salia PLCC
Unauthenticated attackers can execute arbitrary commands with elevated privileges on EV chargers by intercepting insecure cloud communication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-11666?
CVE-2024-11666 is a critical command injection vulnerability in hardy-barth cph2_echarge_firmware, published on 24 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an EV charger controller and eCharge infrastructure can execute arbitrary commands with elevated privileges on affected devices.
This issue affects cph2_echarge_firmware: through 2.0.4.
Weakness: CWE-345
Which versions are affected by CVE-2024-11666?
It affects 1 product.
Products include Echarge Salia Plcc Firmware.
How do I fix CVE-2024-11666?
No fix has been published for CVE-2024-11666 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-11666 being exploited?
There is no known exploitation of CVE-2024-11666 in the wild and no public exploit code.
Other vulnerabilities in hardy-barth cph2_echarge_firmware
Sources
Also known as GHSA-38x5-mx6x-v39w.