Volerion logoVolerion
Volerion logoVolerion

EVbee Service App and DC Quick Charger Firmware Missing Firmware Validation Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability exists in the EVbee Service App versions prior to 1.4.710 and in the DC Quick Charger Firmware versions prior to V1.5.1. The issue arises because the firmware update mechanism lacks cryptographic signature validation. This flaw enables individuals with access to the firmware update feature to upload arbitrary files, potentially leading to unauthorized code execution.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Users are advised to update the EVbee Service App to the latest version and ensure that the DC Quick Charging Station is connected to receive the firmware update.

Added: Jul 13, 2026, 12:07 PM
Updated: Jul 13, 2026, 12:07 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
5.2
remediation
0.0
relevance
9.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.