Siemens VersiCharge AC Series EV Chargers Missing Immutable Root of Trust Vulnerability

A vulnerability exists in all versions of the Siemens VersiCharge AC Series EV Chargers, including various models of child sockets, parent sockets, cables, and UL commercial and residential products. The vulnerability arises from the absence of an Immutable Root of Trust in the M0 hardware, allowing an attacker with physical access to the device to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to unauthorized physical access and the execution of arbitrary code on the affected device.

Remediation

Siemens recommends protecting network access to affected products with appropriate security measures and following general security practices to maintain a protected IT environment.