PatchTheCVECVEs published by S21sec
CVEs published by S21sec (CVE Numbering Authority). 15 tracked.
- CVE-2025-11155 MEDIUM 6.8 The credentials required to access the device's web server are sent in base64 within the HTTP headers
- CVE-2026-22544 HIGH 8.7 An attacker with a network connection could detect credentials in clear text.
- CVE-2026-22543 MEDIUM 6.9 The credentials required to access the device's web server are sent in base64 within the HTTP headers
- CVE-2026-22542 CRITICAL 9.2 An attacker with access to the system's internal network can cause a denial of service on the system by making
- CVE-2026-22541 HIGH 8.2 The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that a
- CVE-2026-22540 CRITICAL 9.2 The massive sending of ARP requests causes a denial of service on one board of the charger that allows control
- CVE-2026-22539 MEDIUM 5.3 As the service interaction is performed without authentication, an attacker with some knowledge of the protoco
- CVE-2026-22537 MEDIUM 6.8 The lack of hardening of the system allows the user used to manage and maintain the charger to consult differe
- CVE-2026-22536 HIGH 8.6 The absence of permissions control for the user XXX allows the current configuration in the sudoers file to es
- CVE-2026-22535 HIGH 8.9 An attacker with the ability to interact through the network and with access credentials, could, thanks to the
- CVE-2025-64389 HIGH 8.3 The web server of the device performs exchanges of sensitive information in clear text through an insecure pro
- CVE-2025-64388 CRITICAL 9.2 Denial of service of the web server through specific requests to this protocol
- CVE-2025-64387 MEDIUM 5.1 The web application is vulnerable to a so-called ‘clickjacking’ attack
- CVE-2025-64386 HIGH 7.7 The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hi
- CVE-2025-64385 CRITICAL 9.2 The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or