Autel

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

Autel records in CISA KEV

No Autel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Maxicharger Single Charger Firmware 18 records HIGH Maxicharger Ac Elite Business C50 Firmware 15 records MEDIUM Maxicharger Ac Pro Firmware 10 records MEDIUM Maxicharger Ac Ultra Firmware 10 records MEDIUM Maxicharger Dc Compact Mobile Firmware 10 records MEDIUM Maxicharger Dc Compact Pedestal Firmware 10 records MEDIUM Maxicharger Dc Fast Firmware 10 records MEDIUM Maxicharger Dc Hipower Firmware 10 records MEDIUM

Records

28 records

TI-2026-07902 CVE-2026-8985 · GHSA-g3wx-h3f8-c23p

Unauthenticated command injection in Autel MaxiCharger Single

HIGH 82

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07092 Published 2026-07-21 No fix listed CWE-78

TI-2026-07901 CVE-2026-8984 · GHSA-9qpp-vgrg-5mhj

Unauthenticated RCE in Autel MaxiCharger Single

HIGH 82

Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00905 Published 2026-07-21 No fix listed CWE-94

TI-2026-07900 CVE-2026-8983 · GHSA-hmfc-f829-2xf3

Backdoor Authentication Token

HIGH 82

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00687 Published 2026-07-21 No fix listed CWE-798

TI-2026-07899 CVE-2026-8982 · GHSA-7rv7-46cm-g66m

Hard-coded / Backdoor Accounts

HIGH 82

Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00479 Published 2026-07-21 No fix listed CWE-798

TI-2026-07904 CVE-2026-8987 · GHSA-qh3x-7q6p-6x7f

Authenticated heap overflow in Autel MaxiCharger Single

HIGH 76

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00637 Published 2026-07-21 No fix listed CWE-122

TI-2026-07903 CVE-2026-8986 · GHSA-pfm9-xrwg-mf3r

Command Injection via Malicious OCPP Server

HIGH 76

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.03285 Published 2026-07-21 No fix listed CWE-78

TI-2026-07906 CVE-2026-8989 · GHSA-wpf3-8j9v-2qg2

Open Recovery Mode

HIGH 72

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00241 Published 2026-07-21 No fix listed CWE-1191

TI-2026-07905 CVE-2026-8988 · GHSA-qpg5-v459-hjvj

Access to Bootloader

HIGH 72

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader.

CVSS 4.0HIGH 8.6 Physical No auth No interaction EPSS 0.00241 Published 2026-07-21 No fix listed CWE-1191

TI-2024-15935 CVE-2024-23957 · GHSA-c7j9-vm5x-xj32

Stack-based buffer overflow in Autel MaxiCharger AC Elite Business C50

MEDIUM 42

Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00972 Published 2024-09-28 No fix listed CWE-121

TI-2024-15936 CVE-2024-23958 · GHSA-m49p-vxgg-3vx7

Hard-coded credentials in Autel MaxiCharger AC Elite Business C50

MEDIUM 41

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00796 Published 2024-09-28 No fix listed CWE-798

TI-2024-07227 CVE-2024-7795 · GHSA-64gw-gxfq-f34c

Stack-based buffer overflow in Autel MaxiCharger AC Elite Business C50

MEDIUM 41

Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00533 Published 2024-08-21 No fix listed CWE-121

TI-2025-05258 CVE-2025-5830 · GHSA-vx6x-gx62-4xg7

Heap-based buffer overflow in Autel MaxiCharger AC Wallbox Commercial

MEDIUM 40

Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00388 Published 2025-06-25 No fix listed CWE-122

TI-2025-05255 CVE-2025-5827 · GHSA-r4wh-52px-cghm

Stack-based buffer overflow in Autel MaxiCharger AC Wallbox Commercial

MEDIUM 40

Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00388 Published 2025-06-25 No fix listed CWE-121

TI-2026-11278 CVE-2026-13308 · GHSA-h225-8qf9-jw2x

Integer underflow in Autel MaxiCharger AC Elite Home

LOW 39

Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00779 Published 2026-07-29 No fix listed CWE-191

TI-2025-06065 CVE-2025-6678 · GHSA-9rgw-7fg2-wjgr

Missing authentication in Autel MaxiCharger AC Wallbox Commercial

LOW 39

Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2025-06-25 No fix listed CWE-306

TI-2024-15942 CVE-2024-23967 · GHSA-x63p-f88f-gg9j

Stack-based buffer overflow in Autel MaxiCharger AC Elite Business C50

LOW 39

Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00907 Published 2024-09-28 No fix listed CWE-121

TI-2025-05250 CVE-2025-5822 · GHSA-68xm-7jcv-ph77

Incorrect authorization in Autel MaxiCharger AC Wallbox Commercial

LOW 38

Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00412 Published 2025-06-25 No fix listed CWE-863

TI-2024-15937 CVE-2024-23959 · GHSA-qc45-54hc-mx8p

Stack-based buffer overflow in Autel MaxiCharger AC Elite Business C50

LOW 38

Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00817 Published 2024-09-28 No fix listed CWE-121

TI-2025-05253 CVE-2025-5825 · GHSA-qh98-g57p-5cpx

Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution…

LOW 35

Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00278 Published 2025-06-25 No fix listed CWE-1328

TI-2026-11279 CVE-2026-13309 · GHSA-hhjf-qv52-vp59

Stack-based buffer overflow in Autel MaxiCharger AC Elite Home

LOW 32

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00344 Published 2026-07-29 No fix listed CWE-121

TI-2026-11277 CVE-2026-13307 · GHSA-235j-grhc-6hqc

Heap-based buffer overflow in Autel MaxiCharger AC Elite Home

LOW 32

Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00344 Published 2026-07-29 No fix listed CWE-122

TI-2025-05257 CVE-2025-5829 · GHSA-h25w-g9wc-4f82

Stack-based buffer overflow in Autel MaxiCharger AC Wallbox Commercial

LOW 32

Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0034 Published 2025-06-25 No fix listed CWE-121

TI-2025-05256 CVE-2025-5828 · GHSA-7jqp-8whx-wm8w

Buffer overflow in Autel MaxiCharger AC Wallbox Commercial

LOW 32

Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0034 Published 2025-06-25 No fix listed CWE-120

TI-2025-05252 CVE-2025-5824 · GHSA-vjqh-vxpx-8294

Origin validation error in Autel MaxiCharger AC Wallbox Commercial

LOW 32

Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00172 Published 2025-06-25 No fix listed CWE-346

TI-2026-11275 CVE-2026-13305 · GHSA-mp9m-rq8w-3xm6

Improper signature verification in Autel MaxiCharger AC Elite Home

LOW 30

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.4 Physical No auth No interaction EPSS 0.00169 Published 2026-07-29 No fix listed CWE-347

Open these records in search →

Critical	6
High	14
Medium	8
Low	0
No CVSS	0