Efacec
15 CVEs across 8 Efacec products. Browse Efacec vulnerabilities, severities, and proof-of-concept exploits.
Efacec products with known CVEs
Efacec CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-22539 | | | 2026-01-07 | As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could obtain information about the charger via… |
CVE-2026-22544 | | | 2026-01-07 | An attacker with a network connection could detect credentials in clear text. |
CVE-2026-22543 | | | 2026-01-07 | The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attac… |
CVE-2026-22537 | | | 2026-01-07 | The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or val… |
CVE-2026-22536 | | | 2026-01-07 | The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate privileges without any restrictions |
CVE-2026-22535 | | | 2026-01-07 | An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured (unencrypted) MQTT communications prot… |
CVE-2026-22542 | | | 2026-01-07 | An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet se… |
CVE-2026-22541 | | | 2026-01-07 | The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board… |
CVE-2026-22540 | | | 2026-01-07 | The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be op… |
CVE-2023-6689 | High | 8.2 | 2023-12-20 |
A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF at… |
CVE-2023-50707 | Critical | 9.6 | 2023-12-20 |
Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service condition on the device.
|
CVE-2023-50706 | Medium | 4.1 | 2023-12-20 |
A user without administrator permissions with access to the UC500 windows system could perform a memory dump of the running processes and extract… |
CVE-2023-50705 | Medium | 5.3 | 2023-12-20 |
An attacker could create malicious requests to obtain sensitive information about the web server.
|
CVE-2023-50704 | Medium | 4.3 | 2023-12-20 |
An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged to facilitate ph… |
CVE-2023-50703 | Medium | 6.3 | 2023-12-20 |
An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized access to the applicati… |