Besen BS20 EV Charging Station Bluetooth Low Energy Weak Authentication Vulnerability

A vulnerability exists in the Besen BS20 EV Charging Station, affecting versions through 20260426. The issue lies in the Bluetooth Low Energy (BLE) authentication mechanism, which imposes weak password requirements. The charger comes with a shared default password and mandates a fixed 6-digit numeric format, allowing for only 1,000,000 possible combinations. This limitation makes the device susceptible to brute-force attacks. Furthermore, the BLE authentication handshake can be intercepted and analyzed offline to crack passwords, potentially leading to unauthorized access and control of the charging station.

Impact

Exploitation of this vulnerability could result in unauthorized access to and control over the EV charging station.