CVE-2026-8988

Awaiting Analysis Awaiting Analysis - Queue

UART Interface Access in Autel Maxi Charger Single Firmware

Publication date: 2026-07-21

Last updated on: 2026-07-22

Assigner: CyberDanube

Description

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-22

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-8988

EUVD

EUVD-2026-46437

Affected Vendors & Products

Vendor	Product	Version / Range
autel	maxi_charger_single	to 1.03.51 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1191	The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.

Attack-Flow Graph

Executive Summary

This vulnerability affects Autel Maxi Charger Single firmware through V1.03.51. It exposes an accessible UART interface that allows interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can exploit this to modify boot configuration or file system and gain operating system access.

Detection Guidance

This vulnerability requires physical access to the Autel Maxi Charger Single device to exploit the UART interface. Detection involves checking for unauthorized physical connections or modifications to the device's hardware or boot process.

Impact Analysis

If you own or use an Autel Maxi Charger Single with affected firmware, an attacker with physical access could gain unauthorized control over the device. This could lead to data theft, device manipulation, or further network compromise depending on the charger's connectivity and usage.

Compliance Impact

This vulnerability allows physical access to modify boot configurations or file systems, potentially bypassing security controls. This could lead to unauthorized data access or tampering, which may violate GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information.

Mitigation Strategies

Restrict physical access to the Autel Maxi Charger Single device to authorized personnel only. Ensure the device is stored in a secure location and monitor for any signs of tampering with the hardware or bootloader.

Hi! I’m here to help you understand CVE-2026-8988. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70