Mennekes Smart/Premium Charging Systems SQL Injection Vulnerability in Web Configuration Interface
Vulnerability
A SQL injection vulnerability has been identified in the web configuration interface of Mennekes Smart and Premium charging stations, affecting firmware versions prior to 2.15. This vulnerability arises because user input in several fields is not properly sanitized, allowing for the execution of arbitrary SQL commands.
Impact
Exploitation of this vulnerability allows for arbitrary SQL command execution, potentially leading to unauthorized data access or manipulation within the charging station's database.
Remediation
Users are advised to update the firmware to version 2.15 or later. The latest firmware can be downloaded from the Mennekes Software Updates page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.