« Volver al listado

CVE-2024-5684

Estado: ModificadaAlta (8.8)—

An attacker with access to the private network (the charger is connected to) or local access to the Ethernet-Interface can exploit a faulty implementation of the JWT-library in order to bypass the password authentication to the web configuration interface and then has full access as the user would have. However, an attacker will not have developer or admin rights. If the implementation of the JWT-library is wrongly configured to accept "none"-algorithms, the server will pass insecure JWT. A local, unauthenticated attacker can exploit this vulnerability to bypass the authentication mechanism.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

VW — Id.charger Connect FirmwareVW — Id.charger PRO Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-5684",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-5684",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-06T13:27:31.304336Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@asrg.io",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@asrg.io",
      "affectedData": [
        {
          "vendor": "Volkswagen Group Charging GmbH - Elli, EVBox",
          "product": "ID Charger Connect & Pro",
          "versions": [
            {
              "status": "affected",
              "version": "SPR3.2B"
            },
            {
              "status": "affected",
              "version": "SPR3.51"
            },
            {
              "status": "affected",
              "version": "SPR3.52"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:volkswagen_group_charging_gmbh_elli_evbox:id_charger_connect_and_pro:spr3.2b:*:*:*:*:*:*:*"
          ],
          "vendor": "volkswagen_group_charging_gmbh_elli_evbox",
          "product": "id_charger_connect_and_pro",
          "versions": [
            {
              "status": "affected",
              "version": "spr3.2b"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:volkswagen_group_charging_gmbh_elli_evbox:id_charger_connect_and_pro:spr3.51:*:*:*:*:*:*:*"
          ],
          "vendor": "volkswagen_group_charging_gmbh_elli_evbox",
          "product": "id_charger_connect_and_pro",
          "versions": [
            {
              "status": "affected",
              "version": "spr3.51"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:volkswagen_group_charging_gmbh_elli_evbox:id_charger_connect_and_pro:spr3.52:*:*:*:*:*:*:*"
          ],
          "vendor": "volkswagen_group_charging_gmbh_elli_evbox",
          "product": "id_charger_connect_and_pro",
          "versions": [
            {
              "status": "affected",
              "version": "spr3.52"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-06T13:15:32.027",
  "references": [
    {
      "url": "https://asrg.io/security-advisories/vulnerability-in-id-charger-connect-and-pro-from-volkswagen-group-charging-gmbh-elli-evbox-versions-spr3-2b-spr3-51-and-spr3-52/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@asrg.io"
    },
    {
      "url": "https://asrg.io/security-advisories/vulnerability-in-id-charger-connect-and-pro-from-volkswagen-group-charging-gmbh-elli-evbox-versions-spr3-2b-spr3-51-and-spr3-52/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@asrg.io",
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker with access to the private network (the charger is connected to) or local access to the Ethernet-Interface can exploit a faulty implementation of the JWT-library in order to bypass the password authentication to the web configuration interface and then has full access as the user would have. However, an attacker will not have developer or admin rights. If the implementation of the JWT-library is wrongly configured to accept \"none\"-algorithms, the server will pass insecure JWT. A local, unauthenticated attacker can exploit this vulnerability to bypass the authentication mechanism."
    },
    {
      "lang": "es",
      "value": "Un atacante con acceso a la red privada (a la que está conectado el cargador) o acceso local a la interfaz Ethernet puede explotar una implementación defectuosa de la librería JWT para omitir la autenticación de contraseña en la interfaz de configuración web y luego tener acceso completo como lo habría hecho el usuario. Sin embargo, un atacante no tendrá derechos de desarrollador ni de administrador. Si la implementación de la librería JWT está configurada incorrectamente para aceptar algoritmos \"ninguno\", el servidor pasará JWT inseguro. Un atacante local no autenticado puede aprovechar esta vulnerabilidad para eludir el mecanismo de autenticación."
    }
  ],
  "lastModified": "2026-06-17T08:16:25.887",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:vw:id.charger_connect_firmware:spr3.2:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EC6FAEB-299C-4B80-86DC-DCF360112634"
            },
            {
              "criteria": "cpe:2.3:o:vw:id.charger_connect_firmware:spr3.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38C5905C-1F7A-4747-8983-F40270C34A17"
            },
            {
              "criteria": "cpe:2.3:o:vw:id.charger_connect_firmware:spr3.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25691151-74B1-4B0D-BFDD-AE683B5C50C1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:vw:id.charger_connect:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "96237641-90A5-4382-96DF-52A7BDAC1F81"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:vw:id.charger_pro_firmware:spr3.2:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1977125C-AF1C-41EF-86A1-CF4549F22EF9"
            },
            {
              "criteria": "cpe:2.3:o:vw:id.charger_pro_firmware:spr3.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F73F41A-6D43-4743-A8F2-F13A2C351AAE"
            },
            {
              "criteria": "cpe:2.3:o:vw:id.charger_pro_firmware:spr3.52:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A391298-4342-4A2D-B16B-77AC8FDD09F9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:vw:id.charger_pro:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2DBD3C1-5775-474D-BAD0-A1775DC80326"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@asrg.io"
}