CVE:CVE-2021-45418
CNNVD:CNNVD-202112-2170
Star Charge Nova 360 Cabinet和Titan 180 Premium都是中国Star Charge公司的产品。Nova 360 Cabinet是一种充电机柜。Titan 180 Premium是一款商用大功率充电站。
Star Charge Nova 360 Cabinet和Titan 180 Premium 存在路径遍历漏洞，该漏洞允许攻击者通过main.cgi进行目录遍历的攻击。受影响的产品包括:Nova 360 Cabinet <=1.3.0.0.6 -修正:1.3.0.0.9和Titan 180 Premium <=1.3.0.0.7b102 -修正:Beta1.3.0.1.0。
solution:Upgrade starcharge titan_180_premium_firmware to a higher version than 1.3.0.0.6,and avoid the version (,1.3.0.0.6]; Upgrade starcharge nova_360_cabinet_firmware to a higher version than 1.3.0.0.7b102,and avoid the version (,1.3.0.0.7b102]