The United States Computer Emergency Response Team (US-CERT) has warned that the software included in the Energizer DUO USB battery charger contains a backdoor that allows unauthorized remote system access. In an advisory, the US-CERT warned that he installer for the Energizer DUO software places the file UsbCharger.dll in the application’s directory and Arucer.dll in the Windows system32 directory. An attacker is able to remotely control a system, including the ability to list directories, send and receive files, and execute programs. The backdoor operates with the privileges of the logged-on user.
Adafruit publishes a wide range of writing and video content, including interviews and reporting on the maker market and the wider technology world. Our standards page is intended as a guide to best practices that Adafruit uses, as well as an outline of the ethical standards Adafruit aspires to. While Adafruit is not an independent journalistic institution, Adafruit strives to be a fair, informative, and positive voice within the community – check it out here: adafruit.com/editorialstandards
Stop breadboarding and soldering – start making immediately! Adafruit’s Circuit Playground is jam-packed with LEDs, sensors, buttons, alligator clip pads and more. Build projects with Circuit Playground in a few minutes with the drag-and-drop MakeCode programming site, learn computer science using the CS Discoveries class on code.org, jump into CircuitPython to learn Python and hardware together, TinyGO, or even use the Arduino IDE. Circuit Playground Express is the newest and best Circuit Playground board, with support for CircuitPython, MakeCode, and Arduino. It has a powerful processor, 10 NeoPixels, mini speaker, InfraRed receive and transmit, two buttons, a switch, 14 alligator clip pads, and lots of sensors: capacitive touch, IR proximity, temperature, light, motion and sound. A whole wide world of electronics and coding is waiting for you, and it fits in the palm of your hand.
Have an amazing project to share? The Electronics Show and Tell is every Wednesday at 7:30pm ET! To join, head over to YouTube and check out the show’s live chat and our Discord!
Python for Microcontrollers – Adafruit Daily — Python on Microcontrollers Newsletter: Diving into the Raspberry Pi RP2350, Python Survey Results and more! #CircuitPython #Python #micropython @ThePSF @Raspberry_Pi
EYE on NPI – Adafruit Daily — EYE on NPI Maxim’s Himalaya uSLIC Step-Down Power Module #EyeOnNPI @maximintegrated @digikey
How is a MintyBoost the same as this device? It looks to me like a battery charger and not a device that uses batteries to charge USB devices?
True, stupid software mistake but do not realy see the connection with a MintyBoost. Or maybe you could use a MintyBoost to charge your batteries? Now that would be stupid! 😉
Why do you even need software to run a Nicad charger? With all the various chips out there such as those available from Maxim, it’s all built into the silicon anyway, all the USB port needs to provide is power.
Sounds like an over-engineered solution that got combined with a software developer’s infected system to produce malware installation disks that also installed the support software for the charger. Brrrrh!
I’ve actually got one of these. Firstly, the mintyboost charges a device like an iPod. Whereas the Energizer charges batteries.
Secondly, the software tells you how charged your batteries are. However the software is definitely poorly made. The readme had 4 typo’s in it at least.
Lameeeee
That’s just frack’n lovely.
Why a battery charger even requires software like that is beyond me – can’t you just enumerate as an HID and negotiate up to 500mA?
The device in question is the opposite of the current MintyBoost, though – it charges AAs / AAAs from USB, not vice versa.
How is a MintyBoost the same as this device? It looks to me like a battery charger and not a device that uses batteries to charge USB devices?
True, stupid software mistake but do not realy see the connection with a MintyBoost. Or maybe you could use a MintyBoost to charge your batteries? Now that would be stupid! 😉
@marius – we said open source “like” the mintyboost, encourage open source so things like this does not happen.
Why do you even need software to run a Nicad charger? With all the various chips out there such as those available from Maxim, it’s all built into the silicon anyway, all the USB port needs to provide is power.
Sounds like an over-engineered solution that got combined with a software developer’s infected system to produce malware installation disks that also installed the support software for the charger. Brrrrh!
I’ve actually got one of these. Firstly, the mintyboost charges a device like an iPod. Whereas the Energizer charges batteries.
Secondly, the software tells you how charged your batteries are. However the software is definitely poorly made. The readme had 4 typo’s in it at least.
Jees, backdoor access via a usb battery charger! Really a big flaw.