An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.

Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. These vulnerabilities were discovered as part of a PWN2OWN competition initiated by Trend Micro Zero Day Initiative (ZDI).