Lucene search
HistoryMar 12, 2024 - 9:15 a.m.
CVE-2024-25998
remote attacker
command injection
input validation
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
0.001
Percentile
29.7%
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.
References
Related
vulnrichment
vulnrichment
CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service
2024-03-12 08:11:31
cve
cve
CVE-2024-25998
2024-03-12 09:15:08
prion
prion
Command injection
2024-03-12 09:15:00
cvelist
cvelist
CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service
2024-03-12 08:11:31
CVSS3
7.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
0.001
Percentile
29.7%
Related for NVD:CVE-2024-25998