Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-43656— A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution.

Quick assessment

Affected
Iocharger Iocharger firmware for AC models
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

iocharger是中国银河樟坛（iocharger）公司的一个电动汽车充电和智能能源管理解决方案。 Iocharger存在安全漏洞，该漏洞源于对特殊元素中和不当。

AI Predicted 9.8 Difficulty: Moderate EPSS 1.52% · P75
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-43656

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution.
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be difficult for an attacker to identify the file structure of the <redated> directory, and then modify the backup to add a new CGI script in the correct directory. Furthermore, the attacker will need an account to restore the settings backup, or convince a user with such access to upload a modified backup file. Impact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services. CVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/S:P/AU:Y
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Iocharger 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iocharger是中国银河樟坛（iocharger）公司的一个电动汽车充电和智能能源管理解决方案。 Iocharger存在安全漏洞，该漏洞源于对特殊元素中和不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Iocharger Iocharger firmware for AC models 0 ~ 24120701 -

II. Public POCs for CVE-2024-43656

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-43656

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-43656 (2)

Vendor Pages for CVE-2024-43656 (1)

Same Patch Batch · Iocharger · 2025-01-09 · 16 CVEs total

CVE-2024-43658 Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can b
CVE-2024-43661 Buffer overflow in <redacted>.so leads to DoS of OCPP service
CVE-2024-43654 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43655 Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script
CVE-2024-43648 Authenticated command injection via <redacted>.exe <redacted> parameter
CVE-2024-43657 When uploading new firmware, a shell script inside a firmware file is executed during its
CVE-2024-43662 Authenticated arbitrary file upload to /tmp/ and /tmp/upload/
CVE-2024-43653 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault
CVE-2024-43652 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43650 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43649 Authenticated command injection via <redacted>.exe <redacted> parameter
CVE-2024-43659 Plaintext default credentials in firmware
CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43660 Arbitrary file download using <redacted>.sh

IV. Related Vulnerabilities

Same product: Iocharger firmware for AC models
Same vendor: Iocharger
Same weakness: CWE-78