CVE-2025-22366: falha de alta gravidade em Mennekes Smart / Premium charging stations
Mennekes smart/premium charges systems, Command injection in firmware upgrade
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.6%
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/S:N/AU:Y
Produtos afetados
Mennekes · Smart / Premium charging stationsCVEs relacionadas — Mennekes Smart / Premium charging stations
No mesmo produto, das mais perigosas para as menos.
CVE-2025-22368HIGHMennekes smart/premium charges systems, Command injection in sCU firmware updateEPSS 0.6%CVE-2025-22367HIGHMennekes smart/premium charges systems, Command injection in time settingEPSS 0.6%CVE-2025-22370MEDIUMMennekes smart/premium charges systems, SQL Injection in web configuration interfaceEPSS 0.4%CVE-2025-22369HIGHMennekes smart/premium charges systems, Arbitrary file download using ReadFile endpointEPSS 0.4%