VULNERABILITY INTELLIGENCE

CVE-2020-8007

CVSS score9.8 CRITICAL
EPSS probability1.74%
CISA KEVNot currently listed
Published2024-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-78

Primary references