CVE-2025-5822

🗓️ 25 Jun 2025 18:00:49Reported by zdiType

Autel MaxiCharger AC Wallbox API has a privilege escalation vulnerability due to incorrect authorization.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-5822	11 Jun 202503:00	–	circl
CNNVD	Autel MaxiCharger AC Wallbox Commercial 安全漏洞	25 Jun 202500:00	–	cnnvd
CNVD	Autel MaxiCharger AC Wallbox Commercial Elevation of Privilege Vulnerability	27 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-5822 Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability	25 Jun 202518:00	–	cvelist
EUVD	EUVD-2025-28665	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5822	25 Jun 202518:15	–	nvd
OSV	CVE-2025-5822	25 Jun 202518:15	–	osv
Positive Technologies	PT-2025-25242 · Autel · Autel Maxicharger Ac Wallbox	11 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5822	27 Jun 202518:18	–	redhatcve
Vulnrichment	CVE-2025-5822 Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability	25 Jun 202518:00	–	vulnrichment

NVD

Vulners

Node

autel maxicharger_ac_elite_business_c50_firmwareRange<1.39.51

autel maxicharger_ac_elite_business_c50_firmwareRange<1.56.51

AND

autel maxicharger_ac_elite_business_c50Match-

Node

autel maxicharger_ac_pro_firmwareRange<1.39.51

autel maxicharger_ac_pro_firmwareRange<1.56.51

AND

autel maxicharger_ac_proMatch-

Node

autel maxicharger_ac_ultra_firmwareRange<1.39.51

autel maxicharger_ac_ultra_firmwareRange<1.56.51

AND

autel maxicharger_ac_ultraMatch-

Node

autel maxicharger_dc_compact_mobile_firmwareRange<1.39.51

autel maxicharger_dc_compact_mobile_firmwareRange<1.56.51

AND

autel maxicharger_dc_compact_mobileMatch-

Node

autel maxicharger_dc_compact_pedestal_firmwareRange<1.39.51

autel maxicharger_dc_compact_pedestal_firmwareRange<1.56.51

AND

autel maxicharger_dc_compact_pedestalMatch-

Node

autel maxicharger_dc_fast_firmwareRange<1.39.51

autel maxicharger_dc_fast_firmwareRange<1.56.51

AND

autel maxicharger_dc_fastMatch-

Node

autel maxicharger_dc_hipower_firmwareRange<1.39.51

autel maxicharger_dc_hipower_firmwareRange<1.56.51

AND

autel maxicharger_dc_hipowerMatch-

Node

autel maxicharger_dh480_firmwareRange<1.39.51

autel maxicharger_dh480_firmwareRange<1.56.51

AND

autel maxicharger_dh480Match-

Node

autel maxicharger_single_charger_firmwareRange<1.39.51

autel maxicharger_single_charger_firmwareRange<1.56.51

AND

autel maxicharger_single_chargerMatch-

[
  {
    "vendor": "Autel",
    "product": "Autel MaxiCharger AC Wallbox Commercial",
    "versions": [
      {
        "version": "1.36.00",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-25-340/

10 Sep 2025 14:46Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.8

CVSS 37.1

EPSS0.00167

SSVC

CWE-863