Threat database

CVE-2025-22366 is a high-severity OS command injection vulnerability affecting Mennekes Smart / Premium charging stations firmware versions prior to 2.15. The flaw arises from improper neutralization of special elements in OS commands during the authenticated firmware update process, potentially allowing an attacker with limited privileges to execute arbitrary OS commands. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant security risk. No known exploits are reported in the wild, and no official patch links are provided in the input data.