SQL injection in a web application of an int. manufacturer of energy management systems
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Vulnerability Hub
The National Test Institute for Cybersecurity NTC regularly conducts independent and neutral security tests of networked infrastructures, devices and applications. Vulnerability disclosure ensures a relevant impact on society, and serves our commitment to Switzerland's security and digital sovereignty.
The Vulnerability Hub lists the most relevant vulnerabilities identified by the NTC, free and open. Further details about the products tested and the vulnerabilities identified may be provided on a case-by-case basis. Please use the contact form.
Please note that the following list is only a selection of NTC's work.
94 Results
List
Vulnerability
Area
Criticality
Status
Published on
Reflected XSS in the web application of an int. manufacturer of energy management systems
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Exposed debugging tools in the web app of an int. manufacturer of energy management systems
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Unprotected upload mechanism in an int. e-mobility service provider’s websites
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
IDOR vulnerabilities in the web app of a Swiss distributor of e-mobility charging solutions
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed Symfony profiler in the web app of an int. provider of e-mobility solutions
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed bash history on a website of an int. provider of e-mobility solutions
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Unprotected file upload on the website of an int. provider of e-mobility solutions
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed application secrets on the website of a Swiss provider of charging solutions
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Stored XSS in the web application of a Swiss provider of e-mobility charging solutions
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
SQL injection on the website of a Swiss software development company
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed internal files on the web server of an int. e-mobility charging network
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Default credentials in a SOAP backend of an int. e-mobility charging station manufacturer
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Missing authentication on a SOAP API of an int. e-mobility charging station manufacturer
Area: Public Charging Infrastructure
Criticality: medium
Status: fixed
Published on 2023-11-15
Exposed Spring Boot Actuator of an int. e-mobility charging station manufacturer
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Exposed Spring Boot Actuators on multiple domains of an int. station manufacturer
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
SQL injection on a website of a Swiss e-mobility charging station manufacturer
Area: Public Charging Infrastructure
Criticality: high
Status: fixed
Published on 2023-11-15
Vulnearable Testserver Publicly Accessible
Area: Public Charging Infrastructure
Criticality: low
Status: fixed
Published on 2023-11-15
Vulnerability in the applications SOMED and KS of the FSO
Area: Swiss Health Sector
Criticality: high
Status: fixed
Published on 2023-10-25