Description

ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the connection handling of the Bluetooth Low Energy interface. The issue results from limiting the number of active connections to the product. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-21455.

INFO

Published Date :

2024-11-22T21:31:27.805Z

Last Modified :

2024-11-25T16:43:04.607Z

Source :

zdi
AFFECTED PRODUCTS

The following products are affected by CVE-2024-7392 vulnerability.

Vendors Products
Chargepoint
  • Home Flex
  • Home Flex Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-7392.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact