CVE-2024-23970
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 31, 2025
CWE ID 295
Summary
CVE-2024-23970 is a newly disclosed vulnerability affecting ChargePoint Home Flex charging stations. This issue enables network-proximate attackers to compromise transport security without requiring authentication. The root cause of the vulnerability lies within the CURLOPT_SSL_VERIFYHOST setting, which fails to adequately validate the server certificate. An attacker can exploit this flaw in combination with other vulnerabilities to execute arbitrary code with root privileges.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.