Approved changes feed: RSS · Atom
cpe:2.3:a:evbee:dc-80:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Evbee (7b98a1c2-da26-573a-b073-38adf76f78f4) |
|---|---|
| Product | Dc 80 (ba49c156-fe87-52a6-acf1-d36d556cf9cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22103 |
vulnerable | 2026-07-29 00:29:08.865289 |
Command injection in NPC start web endpoint
The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.
Published: 2026-07-13T09:11:00.237Z
Updated: 2026-07-16T15:41:13.345Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22102 |
vulnerable | 2026-07-29 00:29:08.865010 |
Arbitrary file overwrite through certificate update functionality
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Content-Disposition header without verification.
This can be used to cause a denial of service by overwriting system files, or remote-code-execution by overwriting shell-scripts which execution can be triggered through other means.
Published: 2026-07-13T09:10:58.172Z
Updated: 2026-07-16T15:41:06.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22100 |
vulnerable | 2026-07-29 00:29:08.864846 |
Comnand injection in OCPP ReserveLogin message
The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
Published: 2026-07-13T09:10:57.110Z
Updated: 2026-07-16T15:41:11.895Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22099 |
vulnerable | 2026-07-29 00:29:08.864681 |
Missing authentication for Bluetooth communication
The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.
Published: 2026-07-13T09:10:58.667Z
Updated: 2026-07-16T15:41:07.703Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22098 |
vulnerable | 2026-07-29 00:29:08.864502 |
Sensitive information is written to logs
Various sensitive information such as passwords and charging card UIDs are written to log files.
Published: 2026-07-13T09:10:59.654Z
Updated: 2026-07-16T15:41:04.833Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22097 |
vulnerable | 2026-07-29 00:29:08.864215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22096 |
vulnerable | 2026-07-29 00:29:08.864014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22095 |
vulnerable | 2026-07-29 00:29:08.863761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.