CVE-2024-7392: (0Day) ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the connection handling of the Bluetooth Low Energy interface. The issue results from limiting the number of active connections to the product. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-21455.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7392?
CVE-2024-7392 is classified as a denial-of-service vulnerability impacting the ChargePoint Home Flex charging devices.
How do I fix CVE-2024-7392?
To remediate CVE-2024-7392, update the ChargePoint Home Flex to the latest firmware version that addresses the vulnerability.
What devices are affected by CVE-2024-7392?
CVE-2024-7392 affects ChargePoint Home Flex charging devices specifically running firmware version 5.5.3.13.
Can attackers exploit CVE-2024-7392 remotely?
Yes, attackers can exploit CVE-2024-7392 locally as it does not require authentication to create a denial-of-service condition.
What impact does CVE-2024-7392 have on users?
CVE-2024-7392 could lead to service disruption for users, preventing the proper function of the ChargePoint Home Flex charging devices.