pentester.land· Dec 14, 2023· by Ewen Coppens🔍 CVE-2023-46359

OS Command Injection in cPH2 Charging Station <2.0.0 (CVE-2023-46359 and CVE-2023-46360)

Target Program: eCharge Hardy Barth

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#OS command injection#CVE-2023-46359#CVE-2023-46360