CVE-2024-4622
alpitronic Hypercharger EV Charger Use of Default Credentials
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
alpitronic Hypercharger EV Charger Use of Default Credentials
| Assigner | icscert |
| Reserved | 2024-05-07 |
| Published | 2024-05-15 |
| Updated | 2024-08-01 |
If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator.
| CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N |
Hanno Böck reported these vulnerabilities to CISA.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-130-02
