Smart / Premium Charging Stations
Approved changes feed: RSS · Atom
cpe:2.3:a:mennekes:smart_/_premium_charging_stations:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mennekes (d3cc31f0-5828-5d48-ba24-93e3c058fde9) |
|---|---|
| Product | Smart / Premium Charging Stations (f6df8bef-e477-544c-bd0c-fee163d8a494) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-22370 |
vulnerable | 2026-06-08 07:10:52.942343 |
Mennekes smart/premium charges systems, SQL Injection in web configuration interface
Many fields for the web configuration interface of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to execute arbitrary SQL commands because the values are insufficiently neutralized.
Published: 2025-03-11T13:40:22.946Z
Updated: 2025-04-01T04:47:46.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22369 |
vulnerable | 2026-06-08 07:10:52.942021 |
Mennekes smart/premium charges systems, Arbitrary file download using ReadFile endpoint
The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS.
Published: 2025-03-11T13:40:24.403Z
Updated: 2025-04-01T04:47:47.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22368 |
vulnerable | 2026-06-08 07:10:52.941635 |
Mennekes smart/premium charges systems, Command injection in sCU firmware update
The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS.
Published: 2025-03-11T13:40:22.216Z
Updated: 2025-04-01T04:47:45.140Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22367 |
vulnerable | 2026-06-08 07:10:52.941198 |
Mennekes smart/premium charges systems, Command injection in time setting
The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.
Published: 2025-03-11T13:40:21.388Z
Updated: 2025-04-01T04:47:44.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22366 |
vulnerable | 2026-06-08 07:10:52.940671 |
Mennekes smart/premium charges systems, Command injection in firmware upgrade
The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.
Published: 2025-03-11T13:40:23.659Z
Updated: 2026-10-08T19:56:35.185Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.