Skip to content
COOEY

EXPOSURES › CVE-2023-46359

CVE-2023-46359

CRITICAL
DETAIL
SourceNVD · cve Published2024-02-06 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-46359 ↗
⚡ RCE ◐ ZERO-DAY SHAME 50/100 rcezero-day

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.

▸ RECOMMENDED ACTION  Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED
hardy-barth · vendorcph2 echarge · productcph2 echarge firmware · product
DESCRIPTION

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.