Autel MaxiCharger AC Wallbox Commercial Missing Authentication Information Disclosure Vulnerability

A vulnerability exists in the Autel MaxiCharger AC Wallbox Commercial charging stations, allowing remote attackers to access sensitive information without authentication. The issue arises in the Pile API, where the absence of authentication enables attackers to exploit the functionality and potentially disclose credentials, leading to further compromise.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, including credentials, which could be used for further exploitation or compromise of the affected system.

Remediation

Users can update to American Standard V1.39.51 or European Standard V1.56.51 to address this vulnerability.