WOLFBOX Level 2 EV Charger Command Parsing Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in WOLFBOX Level 2 EV Charger devices. This issue arises from a misinterpretation of input in the command frames received by the microcontroller (MCU). The flaw occurs because the frame parsing process fails to accurately detect the beginning of a frame, leading to incorrect interpretation of the data. Exploitation of this vulnerability requires authentication and can be combined with other vulnerabilities to execute arbitrary code on the device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected EV charger devices.

Remediation

The recommended mitigation strategy is to restrict interaction with the affected product.