Autel MaxiCharger AC Wallbox Commercial Dangerous Method Information Disclosure Vulnerability

A vulnerability allowing remote information disclosure has been identified in the Autel MaxiCharger AC Wallbox Commercial EV chargers. This issue arises from an exposed dangerous method in the Autel Technician API, which can be exploited to reveal sensitive information, including credentials, on affected installations. Authentication is required to exploit this vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information, including credentials, which could be used for further compromise.

Remediation

Users can update to version 1.39.51 for American Standard or 1.56.51 for European Standard to address this vulnerability.