Circontrol Raption Buffer Overflow / Command Injection

The server in Circontrol Raption versions through 5.11.2 has a pre-authentication stack-based buffer overflow that can be exploited to gain run-time control of the device as root. The pwrstudio web application of EV Charger (in the server in Circontrol Raption through 5.6.2) is vulnerable to OS command injection.

11.2 application authentication buffer buffer overflow can charger command command injection control device exploited injection os command overflow root run server stack vulnerable web web application