What is CVE-2024-11666?

CVE-2024-11666 is a critical-severity vulnerability in Echarge Salia_plcc, classified under Insufficient Verification of Data Authenticity. CVSS score: 9.0/10. Published 2024-11-24.

How severe is CVE-2024-11666?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Vulnerability in Echarge Salia_plcc

CVE-2024-11666

Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthent…

EPSS: 0.004 (33.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Echarge Salia_plcc
Echarge Salia_plcc_firmware
Hardy-barth Cph2_echarge_firmware — versions 0

Weakness classification (CWE)

CWE-345 — Insufficient Verification of Data Authenticity

References

research@onekey.com (Exploit, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-11666?: CVE-2024-11666 is a critical-severity vulnerability in Echarge Salia_plcc, classified under Insufficient Verification of Data Authenticity. CVSS score: 9.0/10. Published 2024-11-24.
How severe is CVE-2024-11666?: Critical severity. CVSS v3 base score is 9.0 out of 10.