{"metadata": {"vulnerability": "cve-2024-43657", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-08-14T09:27:41.769Z", "date_only": false, "value": "2024-08-14T09:27:41.769Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-43657", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": false, "value": "2025-01-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / DIVD", "record": "cve-2024-43657", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-09T07:56:46.268Z", "date_only": false, "value": "2025-01-09T07:56:46.268Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-43657", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-09T08:15:28Z", "date_only": false, "value": "2025-01-09T08:15:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2722-P93P-VRGM", "record": "GHSA-2722-P93P-VRGM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-09T08:15:28.680Z", "date_only": false, "value": "2025-01-09T08:15:28.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43657", "record": "FKIE_CVE-2024-43657", "field": "published"}, {"timestamp": "2025-01-09T08:16:24Z", "date_only": false, "value": "2025-01-09T08:16:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/912", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "007cf810-08ac-44ef-869f-7a577aa6ff19", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43657\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: High. However, the attacker will need a (low privilege) account to gain access to the action.exe CGI binary and upload the crafted firmware file, or convince a user with such access to upload it.\n\nImpact: Critical \u2013 The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).\n\ud83d\udccf Published: 2025-01-09T07:56:46.268Z\n\ud83d\udccf Modified: 2025-01-09T07:56:46.268Z\n\ud83d\udd17 References:\n1. https://csirt.divd.nl/DIVD-2024-00035/\n2. https://csirt.divd.nl/CVE-2024-43657/\n3. https://iocharger.com", "url": "https://t.me/DarkWebInformer_CVEAlerts/912"}, {"timestamp": "2025-01-09T08:16:44.460Z", "date_only": false, "value": "2025-01-09T08:16:44.460184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "9efd78ec-6a66-41b5-9846-b448ecb6d06c", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagnja4m2d"}, {"timestamp": "2025-01-09T08:32:54.693Z", "date_only": false, "value": "2025-01-09T08:32:54.693584Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113797468926541396", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "f7425524-42b4-458e-9935-3fe55631935c", "url": "https://infosec.exchange/users/cve/statuses/113797468926541396"}, {"timestamp": "2025-01-09T09:31:42Z", "date_only": false, "value": "2025-01-09T09:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2722-P93P-VRGM", "record": "GHSA-2722-P93P-VRGM", "field": "published"}, {"timestamp": "2025-01-09T10:13:57Z", "date_only": false, "value": "2025-01-09T10:13:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14811", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "0a2af82d-eda6-4c16-a155-5dbf0fcadefe", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43657 - Iocharger AC Charger Root Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43657 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root  \n  \nThis issue affects Iocharger firmware for AC model chargers before version 24120701.  \n  \nLikelihood: High. However, the attacker will need a (low privilege) account to gain access to the action.exe CGI binary and upload the crafted firmware file, or convince a user with such access to upload it.  \n  \nImpact: Critical \u2013 The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.  \n  \nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14811"}, {"timestamp": "2025-01-09T14:43:42.626Z", "date_only": false, "value": "2025-01-09T14:43:42.626573Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-43657", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-09T14:43:42.626Z", "date_only": false, "value": "2025-01-09T14:43:42.626573Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43657", "record": "FKIE_CVE-2024-43657", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-09T14:44:32.880Z", "date_only": false, "value": "2025-01-09T14:44:32.880Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-43657", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T15:04:08.989Z", "date_only": false, "value": "2025-01-09T15:04:08.989474Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/113799007314543960", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "b0e861a3-b097-489c-aafe-0bbe89789c66", "url": "https://infosec.exchange/users/cR0w/statuses/113799007314543960"}, {"timestamp": "2025-01-09T15:31:51Z", "date_only": false, "value": "2025-01-09T15:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2722-P93P-VRGM", "record": "GHSA-2722-P93P-VRGM", "field": "modified"}, {"timestamp": "2025-01-09T15:48:42.422Z", "date_only": false, "value": "2025-01-09T15:48:42.422565Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182525499745", "record": "CVE-2024-43657", "field": "creation_timestamp", "uuid": "f1011189-83ed-4751-b917-072efd2df26a", "url": "https://mastodon.social/users/CyberSignaler/statuses/113799182525499745"}, {"timestamp": "2025-03-11T13:07:14.017Z", "date_only": false, "value": "2025-03-11T13:07:14.017Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-43657", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-11T13:07:14.017Z", "date_only": false, "value": "2025-03-11T13:07:14.017Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / DIVD", "record": "cve-2024-43657", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:51:30.627Z", "date_only": false, "value": "2026-06-17T07:51:30.627", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43657", "record": "FKIE_CVE-2024-43657", "field": "lastModified"}]}