Autel MaxiCharger AC Wallbox Commercial Buffer Overflow Remote Code Execution Vulnerability

A buffer overflow vulnerability allowing remote code execution has been identified in the Autel MaxiCharger AC Wallbox Commercial EV chargers. This issue arises from improper validation of the length of user-supplied data in USB frame packets, enabling physically present attackers to execute arbitrary code on the device. No authentication is required for exploitation.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

The vulnerability has been fixed in the American Standard version 1.39.51 and European Standard version 1.56.51.