evbee DC-80 EUVD-2026-88972

Requires physical access to the evbee DC-80 charging station to reach the device's service menu. The menu is obfuscated but not protected by authentication, so no credentials or special configuration are needed once physical access is obtained. Exploitation is limited to a per-device, hands-on operation - it cannot be performed remotely or at scale - and yields only information disclosure (serial number, MAC address, WiFi SSID and password); the leaked WiFi password is the most consequential item as it can support a subsequent network pivot.

This is a genuinely low-priority issue despite the moderate 5.1 CVSS 4.0 score. The vendor vector (CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N) makes the key limiter explicit: AV:P means physical access to the device is mandatory, which removes any possibility of remote or scalable exploitation. All impact is confidentiality (VC:H) with zero integrity or availability effect. There is no EPSS score, no CISA KEV listing, and no public exploit code - so the exploitation status is 'no public exploit identified at time of analysis.' The report comes from DIVD (a reputable coordinated-disclosure CSIRT), which lends credibility to the finding but does not indicate active exploitation. The one factor that elevates concern above trivial is the specific data exposed: the leaked WiFi SSID and password can enable a follow-on network pivot onto the WiFi the charger is joined to, so the confidentiality-high rating is justified. Net: a real, verified finding but low real-world urgency because it requires hands-on physical access to each individual device.

An attacker with brief physical access to an evbee DC-80 EV charging station navigates the obfuscated (but not authenticated) service menu on the device and reads out sensitive data - serial number, MAC address, and the WiFi network name and password. No public exploit code is required or known; the menu is reachable directly through device interaction. The stolen WiFi credentials can then be used to join and pivot onto the associated wireless network.