Autel MaxiCharger AC Wallbox Commercial Technician API Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Autel MaxiCharger AC Wallbox Commercial charging stations. This issue arises from incorrect authorization in the Autel Technician API, allowing remote attackers to escalate privileges on affected installations. To exploit this vulnerability, an attacker must first obtain a low-privileged authorization token.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, granting access to resources typically protected from the user.

Remediation

This vulnerability has been fixed in the American Standard version 1.39.51 and European Standard version 1.56.51.