Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
Autel records in CISA KEVNo Autel vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00388 · Published 2025-06-25 · No fix listed CWE-122
Priority MEDIUM 40
Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00388 · Published 2025-06-25 · No fix listed CWE-121
Priority LOW 39
Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00479 · Published 2025-06-25 · No fix listed CWE-306
Priority LOW 38
Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2025-06-25 · No fix listed CWE-863
Priority LOW 35
Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00278 · Published 2025-06-25 · No fix listed CWE-1328
Priority LOW 32
Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0034 · Published 2025-06-25 · No fix listed CWE-121
Priority LOW 32
Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0034 · Published 2025-06-25 · No fix listed CWE-120
Priority LOW 32
Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00172 · Published 2025-06-25 · No fix listed CWE-346
Priority LOW 30
Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00558 · Published 2025-06-25 · No fix listed CWE-749
Priority LOW 28
Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability.
CVSS 3.0MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00274 · Published 2025-06-25 · No fix listed CWE-115
THREATIST.IORead the docs