<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: home flex nema 14-50 plug firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-23921: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch</title><link>https://patchthecve.com/cve/CVE-2024-23921.html</link><guid>https://patchthecve.com/cve/CVE-2024-23921.html</guid><pubDate>Wed, 17 Jun 2026 07:13:53 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the wlanapp module. The issue results from the lack of p</description></item><item><title>CVE-2024-23920: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch</title><link>https://patchthecve.com/cve/CVE-2024-23920.html</link><guid>https://patchthecve.com/cve/CVE-2024-23920.html</guid><pubDate>Wed, 17 Jun 2026 07:13:53 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the onboardee module. The issue results from improper ac</description></item><item><title>CVE-2024-23971: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch</title><link>https://patchthecve.com/cve/CVE-2024-23971.html</link><guid>https://patchthecve.com/cve/CVE-2024-23971.html</guid><pubDate>Wed, 17 Jun 2026 07:13:58 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of OCPP messages. The issue results from th</description></item><item><title>CVE-2024-23970: This vulnerability allows network-adjacent attackers to compromise transport security on affected installation</title><link>https://patchthecve.com/cve/CVE-2024-23970.html</link><guid>https://patchthecve.com/cve/CVE-2024-23970.html</guid><pubDate>Wed, 17 Jun 2026 07:13:58 +0000</pubDate><description>MEDIUM 6.5: This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the CURLOPT_SSL_VERIFYHOST setting. The issue res</description></item><item><title>CVE-2024-23969: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch</title><link>https://patchthecve.com/cve/CVE-2024-23969.html</link><guid>https://patchthecve.com/cve/CVE-2024-23969.html</guid><pubDate>Wed, 17 Jun 2026 07:13:58 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the wlanchnllst function. The issue results from the lac</description></item><item><title>CVE-2024-23968: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Ch</title><link>https://patchthecve.com/cve/CVE-2024-23968.html</link><guid>https://patchthecve.com/cve/CVE-2024-23968.html</guid><pubDate>Wed, 17 Jun 2026 07:13:58 +0000</pubDate><description>HIGH 8.8: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the SrvrToSmSetAutoChnlListMsg function. The issue resul</description></item></channel></rss>