Salia Plcc
Approved changes feed: RSS · Atom
cpe:2.3:h:echarge:salia_plcc:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Echarge (7a95fbfa-43c6-537d-aed4-8eb23159fc04) |
|---|---|
| Product | Salia Plcc (bfd5b938-cf4c-524d-b474-9149059ab099) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-11666 |
not_vulnerable | 2026-06-08 06:23:50.125993 |
Unauthenticated Remote Command Injection in eCharge Salia PLCC
CRITICAL (9)
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an EV charger controller and eCharge infrastructure can execute arbitrary commands with elevated privileges on affected devices.
This issue affects cph2_echarge_firmware: through 2.0.4.
Published: 2024-11-24T22:36:59.989Z
Updated: 2024-11-25T01:28:57.027Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11665 |
not_vulnerable | 2026-06-08 06:23:50.125064 |
Unauthenticated Remote Command Injection
HIGH (8.8)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.
Published: 2024-11-24T22:32:43.427Z
Updated: 2024-11-25T01:30:24.409Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.