Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2024-43658— Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.

Quick assessment

Affected
Iocharger Iocharger firmware for AC models
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

iocharger是中国银河樟坛（iocharger）公司的一个电动汽车充电和智能能源管理解决方案。 Iocharger存在安全漏洞。攻击者利用该漏洞可以删除任意文件。

AI Predicted 8.8 Difficulty: Easy EPSS 0.53% · P43
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-43658

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.
Source: CVE Program / CVE List V5
Vulnerability Description
Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files This issue affects Iocharger firmware for AC model before firmware version 25010801. Likelihood: High, but requires authentication Impact: Critical – The vulnerability can be used to delete any file on the charging station, severely impacting the integrity of the charging station. Furthermore, the vulnerability could be used to delete binaries required for the functioning of the charging station, severely impacting the availability of the charging station. CVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads compromised of the integrity and availability of the device (VVC:N/VI:H/VA:H), with no effect on subsequent systems (SC:N/SI:N/SA:N). We do not forsee a safety impact (S:N). This attack can be automated (AU:Y).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y
Source: CVE Program / CVE List V5
Vulnerability Type
路径遍历：’dir/../../filename’
Source: CVE Program / CVE List V5
Vulnerability Title
iocharger 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iocharger是中国银河樟坛（iocharger）公司的一个电动汽车充电和智能能源管理解决方案。 Iocharger存在安全漏洞。攻击者利用该漏洞可以删除任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Iocharger Iocharger firmware for AC models 0 ~ 25010801 -

II. Public POCs for CVE-2024-43658

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-43658

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-43658 (2)

Vendor Pages for CVE-2024-43658 (1)

Same Patch Batch · Iocharger · 2025-01-09 · 16 CVEs total

CVE-2024-43661 Buffer overflow in <redacted>.so leads to DoS of OCPP service
CVE-2024-43654 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43655 Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script
CVE-2024-43648 Authenticated command injection via <redacted>.exe <redacted> parameter
CVE-2024-43657 When uploading new firmware, a shell script inside a firmware file is executed during its
CVE-2024-43662 Authenticated arbitrary file upload to /tmp/ and /tmp/upload/
CVE-2024-43653 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43656 A backup can be manipulated and then restored to create arbitrary files inside the <redact
CVE-2024-43663 Buffer overflow vulnerabilities in CGI scripts lead to segfault
CVE-2024-43652 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43650 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43649 Authenticated command injection via <redacted>.exe <redacted> parameter
CVE-2024-43659 Plaintext default credentials in firmware
CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code executi
CVE-2024-43660 Arbitrary file download using <redacted>.sh

IV. Related Vulnerabilities

Same product: Iocharger firmware for AC models
Same vendor: Iocharger
Same weakness: CWE-27

V. Comments for CVE-2024-43658

No comments yet

Leave a comment