CVE-2024-7391

Summary

CVE-2024-7391 is a vulnerability affecting ChargePoint Home Flex charging devices. This issue enables network-adjacent attackers to disclose sensitive information during the device's Bluetooth Low Energy setup process. By connecting to the charging station, adversaries can obtain Wi-Fi credentials, potentially granting them access to the device owner's network. This vulnerability, identified as ZDI-CAN-21454, requires user interaction to be exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.