{"metadata": {"vulnerability": "CVE-2024-43655", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-08-14T09:27:41.768Z", "date_only": false, "value": "2024-08-14T09:27:41.768Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43655", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": false, "value": "2025-01-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / DIVD", "record": "CVE-2024-43655", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-09T07:56:45.279Z", "date_only": false, "value": "2025-01-09T07:56:45.279Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43655", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-09T08:15:28Z", "date_only": false, "value": "2025-01-09T08:15:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2FFF-928R-P76X", "record": "GHSA-2FFF-928R-P76X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-09T08:15:28.300Z", "date_only": false, "value": "2025-01-09T08:15:28.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43655", "record": "FKIE_CVE-2024-43655", "field": "published"}, {"timestamp": "2025-01-09T08:16:37.067Z", "date_only": false, "value": "2025-01-09T08:16:37.067924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcaggilxz2x", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "5a0798c9-acd9-4c2e-b371-5477d5a67aaf", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcaggilxz2x"}, {"timestamp": "2025-01-09T08:17:12Z", "date_only": false, "value": "2025-01-09T08:17:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/914", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "069fef21-7a3c-4d41-84bc-726ba4a3af30", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43655\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: Moderate \u2013 The attacker will first need to find the name of the script, and needs a (low privilege) account to gain access to the script, or convince a user with such access to execute a request to it.\n\nImpact: Critical \u2013 The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).\n\ud83d\udccf Published: 2025-01-09T07:56:45.279Z\n\ud83d\udccf Modified: 2025-01-09T07:56:45.279Z\n\ud83d\udd17 References:\n1. https://csirt.divd.nl/DIVD-2024-00035/\n2. https://csirt.divd.nl/CVE-2024-43655/\n3. https://iocharger.com", "url": "https://t.me/DarkWebInformer_CVEAlerts/914"}, {"timestamp": "2025-01-09T08:17:54.328Z", "date_only": false, "value": "2025-01-09T08:17:54.328502Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113797409910755927", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "73bbc58c-aaf7-4902-8a91-6e7f7f48e47e", "url": "https://infosec.exchange/users/cve/statuses/113797409910755927"}, {"timestamp": "2025-01-09T09:31:42Z", "date_only": false, "value": "2025-01-09T09:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2FFF-928R-P76X", "record": "GHSA-2FFF-928R-P76X", "field": "published"}, {"timestamp": "2025-01-09T09:31:42Z", "date_only": false, "value": "2025-01-09T09:31:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2FFF-928R-P76X", "record": "GHSA-2FFF-928R-P76X", "field": "modified"}, {"timestamp": "2025-01-09T10:13:53Z", "date_only": false, "value": "2025-01-09T10:13:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14809", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "8594bc6e-a5f8-4c38-a5cf-0f8ce483bf9a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43655 - Iocharger AC Charger Root Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43655 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root  \n  \nThis issue affects Iocharger firmware for AC model chargers before version 24120701.  \n  \nLikelihood: Moderate \u2013 The attacker will first need to find the name of the script, and needs a (low privilege) account to gain access to the script, or convince a user with such access to execute a request to it.  \n  \nImpact: Critical \u2013 The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.  \n  \nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14809"}, {"timestamp": "2025-01-09T15:04:08.921Z", "date_only": false, "value": "2025-01-09T15:04:08.921777Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/113799007314543960", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "91ebb0c8-76cd-491f-bb28-507662ae8a0a", "url": "https://infosec.exchange/users/cR0w/statuses/113799007314543960"}, {"timestamp": "2025-01-09T15:11:43.639Z", "date_only": false, "value": "2025-01-09T15:11:43.639526Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43655", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-09T15:11:43.639Z", "date_only": false, "value": "2025-01-09T15:11:43.639526Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43655", "record": "FKIE_CVE-2024-43655", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-09T15:12:19.472Z", "date_only": false, "value": "2025-01-09T15:12:19.472Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43655", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-16T00:00:00Z", "date_only": true, "value": "2025-01-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-04208", "record": "CNVD-2025-04208", "field": "submitTime"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": true, "value": "2025-03-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-04208", "record": "CNVD-2025-04208", "field": "openTime"}, {"timestamp": "2025-03-11T13:07:19.985Z", "date_only": false, "value": "2025-03-11T13:07:19.985Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43655", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-11T13:07:19.985Z", "date_only": false, "value": "2025-03-11T13:07:19.985Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / DIVD", "record": "CVE-2024-43655", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-11T13:40:02Z", "date_only": false, "value": "2025-03-11T13:40:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7141", "record": "CVE-2024-43655", "field": "creation_timestamp", "uuid": "7717beab-9866-4bcb-99b0-1959e9a4bd60", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43655\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/S:P/AU:Y)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: Moderate \u2013 The attacker will first need to find the name of the script, and needs a (low privilege) account to gain access to the script, or convince a user with such access to execute a request to it.\n\nImpact: Critical \u2013 The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).\n\ud83d\udccf Published: 2025-01-09T07:56:45.279Z\n\ud83d\udccf Modified: 2025-03-11T13:07:19.985Z\n\ud83d\udd17 References:\n1. https://csirt.divd.nl/DIVD-2024-00035/\n2. https://csirt.divd.nl/CVE-2024-43655/\n3. https://iocharger.com", "url": "https://t.me/DarkWebInformer_CVEAlerts/7141"}, {"timestamp": "2026-06-17T07:51:30.333Z", "date_only": false, "value": "2026-06-17T07:51:30.333", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43655", "record": "FKIE_CVE-2024-43655", "field": "lastModified"}]}