Approved changes feed: RSS · Atom

cpe:2.3:a:efacec:qc_60/90/120:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEfacec (0489868d-c5a9-5b2a-bc10-8031ae8c43b4)
ProductQc 60/90/120 (49715ae4-cdb7-5f9b-9e4d-eaecb008beb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22544 vulnerable 2026-06-08 07:51:13.014721 EXCHANGE OF CREDENTIALS IN CLEAR TEXT
An attacker with a network connection could detect credentials in clear text.
Published: 2026-01-07T16:23:08.550Z
Updated: 2026-01-07T16:38:40.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22543 vulnerable 2026-06-08 07:51:13.014342 WEEK ENCODING FOR PASSWORDS
The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials
Published: 2026-01-07T16:10:57.941Z
Updated: 2026-01-07T16:57:16.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22542 vulnerable 2026-06-08 07:51:13.013956 DENIAL OF SERVICE FOR CONCURRENT CONNECTIONS ON TELNET
An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service.
Published: 2026-01-07T15:24:04.290Z
Updated: 2026-01-07T15:38:39.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22541 vulnerable 2026-06-08 07:51:13.013443 DENIAL OF SERVICE VIA ICMP PACKETS
The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
Published: 2026-01-07T15:12:42.368Z
Updated: 2026-01-07T15:29:55.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22539 vulnerable 2026-06-08 07:51:13.010416 INFORMATION DISCLOSURE VIA CURL REQUESTS (OCPP)
As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via OCPP v1.6.
Published: 2026-01-07T17:12:01.065Z
Updated: 2026-01-09T19:09:20.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22537 vulnerable 2026-06-08 07:51:13.010095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22536 vulnerable 2026-06-08 07:51:13.009630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22535 vulnerable 2026-06-08 07:51:13.009111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.