Chargepoint

Home Flex

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-54564

  • EPSS 0.04%
  • Veröffentlicht 01.08.2025 00:00:00
  • Zuletzt bearbeitet 04.08.2025 15:06:15

uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allows command execution as the nobody user.

8.8

CVE-2024-23920

  • EPSS 0.09%
  • Veröffentlicht 31.01.2025 01:15:09
  • Zuletzt bearbeitet 01.07.2025 14:15:31

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the on...

8.8

CVE-2024-23921

  • EPSS 0.08%
  • Veröffentlicht 31.01.2025 01:15:09
  • Zuletzt bearbeitet 01.07.2025 14:15:31

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wl...

8.8

CVE-2024-23968

  • EPSS 0.11%
  • Veröffentlicht 31.01.2025 00:15:09
  • Zuletzt bearbeitet 30.09.2025 16:50:19

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Sr...

8.8

CVE-2024-23969

  • EPSS 0.11%
  • Veröffentlicht 31.01.2025 00:15:09
  • Zuletzt bearbeitet 30.09.2025 16:49:35

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wl...

6.5

CVE-2024-23970

  • EPSS 0.13%
  • Veröffentlicht 31.01.2025 00:15:09
  • Zuletzt bearbeitet 30.09.2025 16:45:17

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

8.8

CVE-2024-23971

  • EPSS 0.07%
  • Veröffentlicht 31.01.2025 00:15:09
  • Zuletzt bearbeitet 30.09.2025 16:43:22

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ha...