CVE-2025-5749

Name of the Vulnerable Software and Affected Versions WOLFBOX Level 2 EV Charger (affected versions not specified)

Description This issue allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. The flaw exists within the handling of cryptographic keys used in vendor-specific encrypted communications, resulting from the lack of proper initialization of a variable prior to accessing it. An attacker can leverage this to bypass authentication on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.