CVE-2025-12357

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...

CVE-2025-12357

CVE-2025-12357 concerns the SLAC protocol used in ISO 15118-2-compliant EV charging systems. The Red Hat/NVD/EUVD entries describe that an attacker can manipulate SLAC measurements to perform a man-in-the-middle between an electric vehicle and the charging station, potentially enabling wireless M...

CVE-2025-12357: Improper Restriction of Communication Channel to Intended Endpoints

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...