PT-2026-62120
CVE-2026-8982
·
Published
2026-07-21
·
Updated
2026-07-21
Description by
CVSS 4.0
10
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions
Autel Maxi Charger Single versions prior to V1.03.52
Description
Two undocumented privileged accounts exist in the firmware. These accounts utilize vendor-defined password derivation mechanisms based on device-specific values. An attacker who knows the algorithm and the necessary inputs can authenticate to the web management interface with administrative privileges.
Recommendations
Update Autel Maxi Charger Single to version V1.03.52 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾