CVE-2024-4622

8.3 highEPSS 0.5%

High (8.3). EPSS 0.5% chance of exploitation in the next 30 days.

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator.

Severity

CVSS 4.0

8.3 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-1392
Published: 2024-05-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-130-02
https://industrydecarbonization.com/news/insecure-password-allowed-administrative-access-to-electric-vehicle-chargers.html
https://www.cisa.gov/news-events/ics-advisories/icsa-24-130-02

Check your stack JSON