Home Flex Hardwired
Approved changes feed: RSS · Atom
cpe:2.3:h:chargepoint:home_flex_hardwired:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Chargepoint (c3d933bb-3f70-502e-8eab-9baec5c0fd34) |
|---|---|
| Product | Home Flex Hardwired (34e999a9-bfd4-51c9-ab33-72b014c6afba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23971 |
not_vulnerable | 2026-06-08 06:29:41.014226 |
ChargePoint Home Flex OCPP bswitch Command Injection
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of OCPP messages. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Published: 2025-01-30T23:42:57.796Z
Updated: 2025-08-26T21:08:23.253Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23970 |
not_vulnerable | 2026-06-08 06:29:41.013538 |
ChargePoint Home Flex Improper Certificate Validation
MEDIUM (6.5)
This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the CURLOPT_SSL_VERIFYHOST setting. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.
Published: 2025-01-30T23:40:49.963Z
Updated: 2025-08-26T21:02:52.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23969 |
not_vulnerable | 2026-06-08 06:29:41.012889 |
ChargePoint Home Flex wlanchnllst Out-Of-Bounds Write
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the wlanchnllst function. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Published: 2025-01-30T23:37:22.462Z
Updated: 2025-08-26T21:02:16.174Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23968 |
not_vulnerable | 2026-06-08 06:29:41.012234 |
ChargePoint Home Flex SrvrToSmSetAutoChnlListMsg Stack-based Buffer Overflow
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SrvrToSmSetAutoChnlListMsg function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
Published: 2025-01-30T23:31:40.396Z
Updated: 2025-08-26T21:01:52.095Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23921 |
not_vulnerable | 2026-06-08 06:29:40.952600 |
ChargePoint Home Flex Command Injection
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the wlanapp module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Published: 2025-01-31T00:17:52.652Z
Updated: 2025-07-01T13:34:34.362Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23920 |
not_vulnerable | 2026-06-08 06:29:40.950145 |
ChargePoint Home Flex Improper Access Control
HIGH (8.8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the onboardee module. The issue results from improper access control. An attacker can leverage this vulnerability to execute code in the context of root.
Published: 2025-01-31T00:15:11.427Z
Updated: 2025-07-01T13:35:46.718Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.