{"id":6537,"date":"2025-06-06T11:25:43","date_gmt":"2025-06-06T11:25:43","guid":{"rendered":"http:\/\/localhost\/?p=6537"},"modified":"2025-06-06T11:25:43","modified_gmt":"2025-06-06T11:25:43","slug":"wolfbox-level-2-ev-charger-management-card-hard-coded-credentials-authentication-bypass-vulnerabilit","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6537","title":{"rendered":"WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nWOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-06T15:29:51.274Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nWOLFBOX<\/td>\n<\/tr>\n
Product<\/th>\nLevel 2 EV Charger<\/td>\n<\/tr>\n
Version<\/th>\n3.1.17 (main), 1.2.6 (MCU)<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n0.0 ()<\/td>\n<\/tr>\n
Attack Vector<\/th>\n<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThis vulnerability allows attackers to bypass authentication on WOLFBOX Level 2 EV Chargers by exploiting hard-coded credentials. It affects the management card handling due to a lack of personalization, enabling physical attackers to gain unauthorized access without needing authentication.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nWOLFBOX<\/td>\n<\/tr>\n
Product<\/th>\nWOLFBOX Level 2 EV Charger Management Card<\/td>\n<\/tr>\n
Affected Version<\/th>\n3.1.17 (main), 1.2.6 (MCU)<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n