ZDI

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file

OCPP reconfiguration vulnerability

udhcpc Privilege Escalation

Creation of a new configuration by posting a malicious ID to MQTT

Exposed Reboot via Modbus

OCPP Firmware download is not properly locked

File Upload vulnerability

Missing input validation / stripping of CRLF characters in SystemConfigManager

Command Injection in SCM (idledisconnect parameter)

ControllerAgent does not perform validation of firmware