Thales Electric Vehicle Charger Denial-of-Service Vulnerability via ARP Request Flooding

A denial-of-service vulnerability has been identified in Thales electric vehicle chargers. The issue arises from excessive Address Resolution Protocol (ARP) requests, which disrupt the normal operation of a control board responsible for managing electric vehicle interfaces. This interference can cause the charger to malfunction.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the affected charger board, disrupting the normal functionality of the electric vehicle interfaces.