Mennekes Smart/Premium Charging Systems Command Injection Vulnerability in Firmware Update
Vulnerability
A command injection vulnerability has been identified in the firmware of Mennekes Smart and Premium charging stations, specifically in versions prior to 2.15. This vulnerability arises from improper neutralization of OS commands, allowing authenticated attackers to execute arbitrary commands on the underlying operating system via the firmware update interface.
Impact
Exploitation of this vulnerability allows for authenticated remote command execution on the affected charging stations.
Remediation
Users are advised to update the firmware to version 2.15 or later. The latest firmware can be downloaded from the Mennekes Software Updates page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.