CVE-2024-7392

Summary

CVE-2024-7392 is a denial-of-service vulnerability affecting ChargePoint Home Flex charging devices with Bluetooth Low Energy interfaces. Network-adjacent attackers can exploit this flaw without authentication, leading to a disruption of service. The root cause is the limited number of active connections to the product, enabling an attacker to overload the system and cause a denial-of-service condition. This vulnerability, originally identified as ZDI-CAN-21455, was reported to ChargePoint and the Zero Day Initiative.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.