Skip to main content

Autel MaxiCharger EUVDEUVD-2026-46437

| CVE-2026-8988 HIGH
On-Chip Debug and Test Interface With Improper Access Control (CWE-1191)
2026-07-21 CyberDanube GHSA-qpg5-v459-hjvj
Information Disclosure Maxicharger Single
8.6
CVSS 4.0 · Vendor: CyberDanube
Share

Severity by source

Vendor (CyberDanube) PRIMARY
8.6 HIGH
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.6 HIGH

Physical UART access with no auth or interaction (AV:P/PR:N/UI:N); bootloader compromise crosses from boot to OS trust boundary giving S:C and full C/I/A:H.

3.1 AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
4.0 AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (CyberDanube).

CVSS VectorVendor: CyberDanube

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 21, 2026 - 22:04 vuln.today
CVE Published
Jul 21, 2026 - 21:21 cve.org
HIGH 8.6

DescriptionCVE.org

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.

AnalysisAI

Physical compromise of Autel MaxiCharger Single EV charging stations running firmware through V1.03.51 is possible via an unprotected UART interface that lets an attacker halt boot and drop into the U-Boot bootloader. From the bootloader an attacker can rewrite boot configuration or the filesystem to gain full operating-system access on the charger. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain physical access to charger
Delivery
Connect to exposed UART header
Exploit
Interrupt U-Boot autoboot
Execution
Modify boot args/filesystem
Persist
Boot to root shell
Impact
Full OS compromise / persistent implant
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires direct physical access to the charger's circuit board and the exposed, unauthenticated UART/serial interface, plus the ability to interrupt U-Boot's autoboot sequence (the bootloader must permit boot interruption, which it does on firmware through V1.03.51). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor CVSS 4.0 score of 8.6 (High) is driven by a full high impact to confidentiality, integrity and availability of both the vulnerable charger and subsequent systems (VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) combined with low attack complexity and no privilege or user-interaction requirement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with brief physical access to a publicly sited MaxiCharger Single opens the enclosure, connects a USB-to-serial adapter to the exposed UART header, and interrupts the boot countdown to reach the U-Boot prompt. Using the publicly available exploit method, they modify the kernel command line or root filesystem to spawn a root shell, obtaining full OS access to read stored credentials/certificates, alter charging or billing logic, or implant persistent malicious firmware.
Remediation No vendor-released patch version is identified at time of analysis, so remediation centers on physical and boot-chain hardening: consult the CyberDanube advisory (https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/) and Autel for firmware updates, and apply any fixed firmware once released. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, conduct an inventory of all Autel MaxiCharger Single stations running firmware through V1.03.51 and assess the physical security posture of each location. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Maxicharger Single

View all
CVE-2026-8985 CRITICAL POC
10.0 Jul 21

Unauthenticated OS command injection in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets a
CVE-2026-8984 CRITICAL POC
10.0 Jul 21

Remote code execution in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets unauthenticated

CVE-2026-8983 CRITICAL POC
10.0 Jul 21

Authentication bypass in Autel MaxiCharger Single EV charging stations running firmware up to and including V1.03.51 let
CVE-2026-8982 CRITICAL POC
10.0 Jul 21

Authentication bypass via hard-coded backdoor accounts in Autel MaxiCharger Single EV charging stations (firmware throug
CVE-2026-8986 CRITICAL POC
9.5 Jul 21

OS command injection in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets a malicious or co
CVE-2026-8987 CRITICAL POC
9.4 Jul 21

Remote code execution and denial of service in Autel MaxiCharger Single EV charging stations running firmware through V1
CVE-2026-8989 HIGH POC
8.6 Jul 21

Physical firmware compromise in Autel MaxiCharger Single EV charging stations (firmware through V1.03.51) lets an attack

Same weakness CWE-1191 – On-Chip Debug and Test Interface With Improper Access Control

View all
CVE-2026-8989 HIGH POC
8.6
CVE-2022-43096 MEDIUM POC
6.8
CVE-2024-48970 CRITICAL
9.3
CVE-2024-41692 HIGH
8.6
CVE-2025-26409 MEDIUM
6.8
CVE-2024-4231 MEDIUM
6.8
CVE-2025-47822 MEDIUM
6.4
CVE-2025-47819 MEDIUM
6.4

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2023-4966 HIGH POC
7.5

Share

EUVD-2026-46437 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy