PatchTheCVECVE-2024-23971: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch
CVE-2024-23971 is a high-severity flaw (CVSS 8.8) affecting home flex nema 14-50 plug firmware, home flex hardwired firmware, home flex nema 6-50 plug firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OCPP messages. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.5% (top 58%) |
| CISA exploited list | No |
| Weakness | CWE-77 |
| Published | 2025-01-31 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-23971?
home flex nema 14-50 plug firmware: mitigate or apply the listed mitigation; home flex hardwired firmware: mitigate or apply the listed mitigation; home flex nema 6-50 plug firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-23971 being exploited?
CVE-2024-23971 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-23971 affect?
CVE-2024-23971 affects home flex nema 14-50 plug firmware, home flex hardwired firmware, home flex nema 6-50 plug firmware. Severity is high (CVSS 8.8). This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists wit
How urgent is CVE-2024-23971?
Priority 41/100. High severity
Related CVEs
- CVE-2024-23970 MEDIUM 6.5 MITIGATE MITIGATE This vulnerability allows network-adjacent attackers to compromise transport security on affected installation
- CVE-2024-23969 HIGH 8.8 MITIGATE MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch
- CVE-2024-23968 HIGH 8.8 MITIGATE MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch
- CVE-2024-23921 HIGH 8.8 MITIGATE MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch
- CVE-2024-23920 HIGH 8.8 MITIGATE MITIGATE This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch