NVD disclosure day

Published threat advisories for February 6, 2024

CVE-2023-46359

Hardy Barth cPH2 eCharge Command Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An OS command injection vulnerability exists in Hardy Barth cPH2 eCharge stations, allowing unauthenticated remote attackers to execute system commands via the connectivity check feature. This could lead to unauthorized system control when the device is network-accessible.

NVD published: February 6, 2024

CVE advisoryCRITICAL

CVE-2024-24398

Stimulsoft Dashboard.JS Directory Traversal Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A directory traversal vulnerability in Stimulsoft Dashboard.JS could allow remote attackers to execute arbitrary code via a crafted payload. This technology is used for reporting and analytics, and if exposed externally, could impact system confidentiality, integrity, and availability.

NVD published: February 6, 2024