VULNERABILITY INTELLIGENCE
CVE-2025-22367
EPSS probability0.65%
CISA KEVNot currently listed
Published2025-03-11
Last modified2026-06-17
Description
The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.
Weakness classification
- csirt@divd.nl: CWE-78