Etrel Inch
Monthly
Etrel INCH AC charging station management web interfaces running firmware prior to 7.1.2 or 8.0.1 expose a factory-default administrator account, a high-priority issue that lets remote attackers log in over cleartext HTTP and gain full administrative control. Successful access reveals charger configuration, OCPP ChargePoint Identity, and CSMS WebSocket connection details, with exploitation limited mainly by whether the default account remains unchanged and the interface is network-reachable. No public exploit identified at time of analysis.
Etrel INCH AC charging station management web interfaces running firmware prior to 7.1.2 or 8.0.1 expose a factory-default administrator account, a high-priority issue that lets remote attackers log in over cleartext HTTP and gain full administrative control. Successful access reveals charger configuration, OCPP ChargePoint Identity, and CSMS WebSocket connection details, with exploitation limited mainly by whether the default account remains unchanged and the interface is network-reachable. No public exploit identified at time of analysis.