EV Energy Charging Stations Insufficiently Protected Credentials Vulnerability

A vulnerability exists in EV Energy charging stations, where authentication identifiers are publicly accessible through web-based mapping platforms. This exposure could allow unauthorized administrative control over the charging stations or disrupt charging services, leading to denial-of-service conditions.

Impact

Exploitation of this vulnerability could enable unauthorized administrative access to the affected charging stations, potentially allowing attackers to disrupt charging services or manipulate station operations.

Remediation

EV Energy did not respond to CISA's request for coordination. For more information, contact EV Energy through their contact page.