PT-2025-25242

CVE-2025-5822

·

Publicado

2025-06-11

·

Atualizado

2025-06-25

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Wallbox (affected versions not specified)
Description The issue concerns an Incorrect Authorization Privilege Escalation Vulnerability in the Commercial Technician API of the Autel MaxiCharger AC Wallbox. This was discovered by Sina Kheirkhah of Summoning Team during Pwn2Own.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ZDI-25-340
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾