Autel
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Autel MaxiCharger AC Wallbox Commercial | 10 | – | Jun 25, 2025 |
| MaxiCharger Single | 8 | – | Jul 21, 2026 |
| MaxiCharger AC Elite Business C50 | 5 | – | Sep 28, 2024 |
| MaxiCharger AC Elite Home | 5 | – | Jul 29, 2026 |
Exploited and recent CVEs
- CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability 0.8%
- CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability 0.3%
- CVE-2026-13309 Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability 0.3%
- CVE-2026-13306 Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability 0.3%
- CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability 0.2%
- CVE-2026-8989 Open Recovery Mode 0.2%
- CVE-2026-8988 Access to Bootloader 0.2%
- CVE-2026-8987 Authenticated Heap Overflow 0.6%
- CVE-2026-8986 Command Injection via Malicious OCPP Server 3.3%
- CVE-2026-8985 Unauthenticated Command Injection 7.1%
- CVE-2026-8984 Unauthenticated RCE 0.9%
- CVE-2026-8983 Backdoor Authentication Token 0.7%
- CVE-2026-8982 Hard-coded / Backdoor Accounts 0.5%
- CVE-2025-5825 Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability 0.3%
- CVE-2025-6678 Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability 0.5%
- CVE-2025-5830 Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
- CVE-2025-5829 Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.3%
- CVE-2025-5823 Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability 0.6%
- CVE-2025-5827 Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.4%
- CVE-2025-5822 Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability 0.4%
- CVE-2025-5828 Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability 0.3%
- CVE-2025-5826 Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability 0.3%
- CVE-2025-5824 Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability 0.2%
- CVE-2024-23959 Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.8%
- CVE-2024-23967 Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability 0.9%
- CVE-2024-23958 Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability 0.8%
- CVE-2024-23957 Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability 1.0%
- CVE-2024-7795 Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability 0.5%