EVbee Service App and DC Quick Charger Sensitive Information Logging Vulnerability

A vulnerability exists in the EVbee Service App and the DC Quick Charger Firmware, prior to version 1.5.1, allowing sensitive information such as passwords and charging card UIDs to be logged insecurely. This issue has been addressed in the latest version of the EVbee Service App.

Impact

Exploitation of this vulnerability leads to the unintentional exposure of sensitive information, including passwords and charging card UIDs, in log files.

Remediation

Users are advised to update the EVbee Service App to version 1.4.710 or later. For the DC Quick Charging Station, ensure that the station is connected to update the firmware.