Wilco van Beijnum

Mennekes smart/premium charges systems, Arbitrary file download using ReadFile endpoint

Mennekes smart/premium charges systems, Command injection in firmware upgrade

Mennekes smart/premium charges systems, SQL Injection in web configuration interface

Mennekes smart/premium charges systems, Command injection in sCU firmware update

Mennekes smart/premium charges systems, Command injection in time setting

A backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code execution.

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script.

Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Buffer overflow vulnerabilities in CGI scripts lead to segfault