7 results · Clear filters · Feed
-
Critical 9.3
Weak root password in EVbee DC 80
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network.
-
Critical 9.3
Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.
-
Critical 9.3
Missing firmware validation allows remote code execution
The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload arbitrary files which can then lead to arbitrary code execution.
-
Critical 9.2
Sensitive information is written to logs
Various sensitive information such as passwords and charging card UIDs are written to log files.
-
Critical 9.3
Arbitrary file overwrite through certificate update functionality
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification. This can be used to cause a denial of service by overwri…
-
Critical 9.3
Missing authentication for webserver endpoints
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints.
-
Critical 9.3
Command injection in diagnosis web endpoint
The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection.