Executive Summary

This vulnerability is a configuration weakness in a device's remote management service. It allows an authenticated session to be established over a communication channel that is intended only for vehicle-charger signaling.

The remote management service is accessible through interfaces exposed by the charging connector and accepts a default administrative credential.

As a result, a malicious device physically connected to the charging interface could exploit this misconfiguration to gain full administrative access to the device.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a significant impact because it allows an attacker with physical access to the charging interface to gain full administrative control over the device.

With full administrative access, the attacker could potentially manipulate device settings, disrupt normal operations, or compromise the security and functionality of the device.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediate steps should focus on addressing the configuration weakness in the remote management service.

• Disable or restrict access to the remote management service over the vehicle-charger signaling communication channel.
• Change or remove the default administrative credentials to strong, unique passwords.
• Physically secure the charging interface to prevent unauthorized devices from connecting.

Useful 0 Not Useful 0