CyberRota Analysis
AI-GeneratedThe Autel Maxi Charger Single firmware versions up to V1.03.51 are vulnerable to unauthenticated remote code execution due to a flaw in the service listening on TCP port 9002. An attacker can exploit this vulnerability by sending a specially crafted request to the /test endpoint, enabling them to download and execute malicious files with root privileges on the device. Organizations using this charger should prioritize patching or mitigating this vulnerability to prevent potential unauthorized access and control over their charging infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request to the /test endpoint can cause the device to download, extract, and execute attacker-controlled files with root privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)