Autel MaxiCharger AC Wallbox Commercial 访问控制错误漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. Autel MaxiCharger AC Wallbox Commercial suffers from an authentication bypass vulnerability that is due to insufficient authentication of the command source. An attacker can exploit the vulnerability to...

Autel MaxiCharger AC Wallbox Commercial 安全漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. The Autel MaxiCharger AC Wallbox Commercial suffers from a command execution vulnerability that stems from a bleprocessesp32msg function input misinterpretation, which can be exploited by an attacker to cau...

Autel MaxiCharger AC Wallbox Commercial 安全漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. Autel MaxiCharger AC Wallbox Commercial suffers from an information disclosure vulnerability that can be exploited by attackers to cause information disclosure...

PT-2025-26878 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations...

PT-2025-25250 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: The issue is related to a heap-based buffer overflow in the DLB SlaveRegister, allowing for remote code execution. This is a result of a heap-based buffer...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability. The specific flaw exists within the...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of USB frame packets. The...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability

This vulnerability allows network-adjacent attackers to inject arbitrary AT commands on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the bleprocessesp32msg functio...

PT-2025-25246 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: The issue concerns a misinterpretation of input in the ble process esp32 msg function. No information is provided about the estimated number of potentially...

PT-2025-25247 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial affected versions not specified Description: The issue is related to a stack-based buffer overflow in the ble process esp32 msg function, allowing for remote code execution. This was demonstrated at...

PT-2025-25249 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial autocharge affected versions not specified Description: The issue is a stack-based buffer overflow that allows for remote code execution. It was discovered by Tobias Scharnowski, Felix Buchmann, and...

PT-2025-25242 · Autel · Autel Maxicharger Ac Wallbox

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox affected versions not specified Description: The issue concerns an Incorrect Authorization Privilege Escalation Vulnerability in the Commercial Technician API of the Autel MaxiCharger AC Wallbox. This was discover...

PT-2025-25245 · Autel · Autel Maxicharger Ac Wallbox Commercial

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox Commercial Firmware affected versions not specified Description: The issue concerns a remote code execution vulnerability due to a firmware downgrade in the Autel MaxiCharger AC Wallbox Commercial. No information ...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DLBSlaveRegister messages...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of JSON messages...

PT-2025-25243 · Autel · Autel Maxicharger Ac Wallbox

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Wallbox affected versions not specified Description: The issue concerns a dangerous method information disclosure vulnerability where the commercial serial number is exposed. This vulnerability was discovered by Sina...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Pile API. The issue results from t...

(Pwn2Own) Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The...