CVE-2020-8007

The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2024-11-08

Last modified

2025-11-04

Weaknesses

CWE-78

Affected products

• Ev Charger (Pwrstudio)

References

• https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/
• https://seclists.org/fulldisclosure/2024/Mar/33
• http://seclists.org/fulldisclosure/2024/Mar/33