Threats tagged 'ghsa-mrqf-rmrx-7g23'

The Etrel INCH AC charging station management web interface prior to firmware versions 7.1.2 and 8.0.1 contains a hard-coded default credentials vulnerability. This flaw allows remote attackers to authenticate using factory-default credentials over unencrypted HTTP, gaining full Administrator access. Exploitation enables attackers to access complete charger configuration, OCPP ChargePoint Identity, and CSMS WebSocket connection details, resulting in unauthorized administrative control of the charging station.