What is the CVSS score of EUVD-2026-50558?

EUVD-2026-50558 has a CVSS 3.0 base score of 6.8 (Medium). CVSS vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Autel MaxiCharger EUVD-2026-50558

| CVE-2026-13309 MEDIUM

Stack-based Buffer Overflow (CWE-121)

2026-07-29 zdi

GHSA-hhjf-qv52-vp59

RCE Buffer Overflow Stack Overflow Maxicharger Ac Elite Home Autel

6.8

CVSS 3.0 · Vendor: zdi

Severity by source

Vendor (zdi) PRIMARY

6.8 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.8 MEDIUM

Physical access required to reach NFC reader; no authentication needed before overflow; full device compromise on success, no scope change.

3.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (zdi).

CVSS VectorVendor: zdi

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 29, 2026 - 20:51 vuln.today

DescriptionCVE.org

Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of card responses via the NFC interface. A crafted card response can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-29044.

AnalysisAI

Stack-based buffer overflow in the NFC card response handler of Autel MaxiCharger AC Elite Home EV chargers enables arbitrary code execution by a physically present attacker. The device's NFC interface fails to enforce bounds on a fixed-length stack buffer when processing card responses, allowing a maliciously crafted NFC card to overwrite stack memory and redirect execution flow to attacker-controlled code. No authentication is required to trigger the flaw - proximity to the device and a crafted NFC card are the sole prerequisites. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Technical ContextAI

The affected product is the Autel MaxiCharger AC Elite Home, an EV charging station that supports NFC-based card authentication (CPE: cpe:2.3:a:autel:maxicharger_ac_elite_home:*:*:*:*:*:*:*:*). The vulnerability is rooted in CWE-121 (Stack-based Buffer Overflow): when the device firmware processes a response from an NFC card presented at the reader interface, it copies card-supplied data into a fixed-length stack buffer without validating the response length. An oversized or specially structured card response overwrites the stack frame, potentially clobbering the saved return address or function pointers. Because NFC card interactions occur before any authentication handshake is completed, no credential or prior access is needed. The vulnerability was discovered and reported by Trend Micro's Zero Day Initiative under internal tracker ZDI-CAN-29044, publicly disclosed as ZDI-26-435.

RemediationAI

No vendor-released patch with an exact fix version has been identified in the available data. Operators should consult the Autel vendor advisory directly and the ZDI disclosure at https://www.zerodayinitiative.com/advisories/ZDI-26-435/ for patch availability updates. As a compensating control, restrict physical access to deployed MaxiCharger AC Elite Home units: locate chargers in controlled-access areas where unaccompanied public proximity is not possible, such as gated parking or monitored enclosures - this directly eliminates the physical (AV:P) attack vector. If the device supports disabling or restricting NFC card authentication in favor of alternative authentication methods (e.g., app-based or network-side authentication only), evaluate that configuration change; note this may affect user experience and interoperability with NFC-based fleet cards. Monitor ZDI and Autel security advisories for firmware updates, as the ZDI coordinated disclosure process typically results in vendor-patched releases.