CyberRota Analysis
AI-GeneratedThe Autel MaxiCharger AC Elite Home EV chargers are vulnerable due to an authentication bypass in their exposed USB interface, allowing physical attackers to gain unauthorized access to system functionalities. This flaw poses a medium severity risk, as it could enable malicious actors to manipulate the charger without authentication. Organizations using these chargers should prioritize addressing this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed USB interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-29046.