PT-2026-133435
CVE-2026-22105
·
Published
2026-10-30
·
Updated
2026-10-30
Description by
CVSS 4.0
8.7
HighMetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.
Found an issue in the description? Have something to add? Feel free to write us 👾