CVE-2024-23969
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 31, 2025
CWE ID 787
Summary
CVE-2024-23969 is a serious vulnerability affecting ChargePoint Home Flex charging stations. Attackers, without requiring authentication, can exploit this issue and execute arbitrary code on the affected installations. The root cause of this vulnerability lies in the wlanchnllst function where user-supplied data lacks proper validation, resulting in a buffer overflow. This flaw allows attackers to write beyond the allocated buffer and ultimately execute code with root privileges.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.