PT-2026-62420
CVE-2026-8989
·
Published
2026-07-21
·
Updated
2026-07-21
Description by
CVSS 4.0
8.6
HighMetricsAV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions
Autel Maxi Charger Single versions prior to V1.03.52
Description
Exposed hardware recovery pins allow unrestricted access to the NXP i.MX6 recovery mode. An attacker with physical access can boot attacker-controlled code in memory to modify or extract firmware and other sensitive data.
Recommendations
Update to a version newer than V1.03.51.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾