Besen BS20 EV Charging Station Improper Authorization Vulnerability in OTA Update Installation Handler

A vulnerability has been identified in the Besen BS20 EV Charging Station, affecting versions prior to 20260426. The issue lies in the OTA Update Installation Handler, where improper authorization allows for unauthorized manipulation of firmware updates. This vulnerability can be exploited remotely, although it requires a high level of complexity and is known to be difficult to exploit.

Impact

Exploitation of this vulnerability could lead to unauthorized installation of firmware, potentially allowing for full control over the charging station and manipulation of its charging functions.