CVE-2024-7392: (0Day) ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability
First published: Fri Nov 22 2024(Updated: )
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the connection handling of the Bluetooth Low Energy interface. The issue results from limiting the number of active connections to the product. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-21455.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ChargePoint Home Flex Firmware | ||
| All of | ||
| ChargePoint Home Flex Firmware | =5.5.3.13 | |
| ChargePoint Home Flex Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7392?
CVE-2024-7392 is classified as a denial-of-service vulnerability impacting the ChargePoint Home Flex charging devices.
How do I fix CVE-2024-7392?
To remediate CVE-2024-7392, update the ChargePoint Home Flex to the latest firmware version that addresses the vulnerability.
What devices are affected by CVE-2024-7392?
CVE-2024-7392 affects ChargePoint Home Flex charging devices specifically running firmware version 5.5.3.13.
Can attackers exploit CVE-2024-7392 remotely?
Yes, attackers can exploit CVE-2024-7392 locally as it does not require authentication to create a denial-of-service condition.
What impact does CVE-2024-7392 have on users?
CVE-2024-7392 could lead to service disruption for users, preventing the proper function of the ChargePoint Home Flex charging devices.
- agent/references
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/title
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/trending
- agent/source
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-24-1047
- alias/ZDI-CAN-21455
- alias/CVE-2024-7392
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/chargepoint
- canonical/chargepoint home flex firmware
- version/chargepoint home flex firmware/5.5.3.13