Chargemap Charging Stations Insufficiently Protected Credentials Vulnerability

A vulnerability exists in Chargemap charging stations, allowing authentication identifiers to be publicly accessed via web-based mapping platforms. This issue could lead to unauthorized administrative control over the charging stations or disrupt charging services, causing a denial-of-service.

Impact

Exploitation of this vulnerability could enable unauthorized access to administrative controls of the affected charging stations, potentially allowing for unauthorized changes or disruptions. Additionally, it could interfere with charging services, leading to a denial-of-service condition where charging stations become unavailable for use.

Remediation

Chargemap did not respond to CISA's request for coordination. For more information, contact Chargemap through their support page.