CVE-2024-4622CWE-1392

alpitronic Hypercharger EV Charger Use of Default Credentials

High · published May 15, 2024

CVSS v4.0
8.3
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface

protected by authentication. If the default credentials are not changed,

an attacker can use public knowledge to access the device as an

administrator.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00489 · 41.2th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2024-05-15T16:54Z
EPSS history
Timeline
  • 15 MAY 16:54Z
    alpitronic Hypercharger EV Charger Use of Default Credentials
    cvelistv5