Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Autel MaxiCharger AC Wallbox Commercial charging stations. This issue arises from the firmware update process, where the lack of proper validation allows network-adjacent attackers to execute arbitrary code. To exploit this vulnerability, an attacker must first pair a malicious Bluetooth device with the target charging station.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Users can update to version 1.39.51 for American Standard or version 1.56.51 for European Standard to address this vulnerability.