XCharge C6 Firmware Update Authenticity Validation Vulnerability Allowing Unauthorized Code Execution

A vulnerability exists in the XCharge C6 charging controller's firmware update mechanism, which fails to properly validate the authenticity of firmware packages received through the device's management interface. This lack of cryptographic signature verification enables an attacker to intercept or impersonate the management channel and cause the device to install unauthorized firmware. Such an action could lead to the execution of unauthorized code with high privileges on the device.

Impact

Exploitation of this vulnerability could allow an attacker to execute unauthorized code with high privileges on the affected device.