CVE-2010-0103

HighPublished

UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the...

Published: Mar 9, 2010
Updated: Sep 17, 2024
Assigning CNA: certcc
Evidence observed: Sep 20, 2010

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

27.3%

Moderate · next 30 days

Percentile: 98.0%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.

Sources

Repository evidence: Files: 2 · Repositories: 1

2 Module

Energizer DUO Trojan ScannerModule
modules/auxiliary/scanner/backdoor/energizer_duo_detect.rb
Metasploit Framework modules
DetectionEvidence observed: Sep 25, 2026Revision: 6144ecdd0f63Related tool
Declared conditions
- verification: check_not_declared($.auxiliary_scanner/backdoor/energizer_duo_detect.check)
Energizer DUO USB Battery Charger Arucer.dll Trojan Code ExecutionModule
modules/exploits/windows/backdoor/energizer_duo_payload.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: 6144ecdd0f63Related tool
Declared conditions
- platform: Windows($.exploit_windows/backdoor/energizer_duo_payload.platform)
- verification: check_not_declared($.exploit_windows/backdoor/energizer_duo_payload.check)

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.