Autel Vulnerabilities and Affected Products
Vulnerabilities associated with MaxiCharger AC Elite Home.
Products
Clear product- Autel MaxiCharger AC Wallbox Commercial10 vulnerabilities
- MaxiCharger Single8 vulnerabilities
- MaxiCharger AC Elite Business C505 vulnerabilities
- MaxiCharger AC Elite Home5 vulnerabilities
- maxicharger_ac_elite_business_c50_eu_firmware4 vulnerabilities
- maxicharger_ac_elite_business_c50_firmware4 vulnerabilities
- maxicharger_ac_elite_business_c501 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-13308HIGH | Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution VulnerabilityAutel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of WebSocket messages related to the OCPP service. The issue results from the lack of proper validation of user-supplied data, which can result in an i… CWE-191Jul 29, 2026 | CVSS8.1v3.0 | EPSS0.567% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13307MEDIUM | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution VulnerabilityAutel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of custom USB packets. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to… CWE-122Jul 29, 2026 | CVSS6.8v3.0 | EPSS0.344% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13309MEDIUM | Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution VulnerabilityAutel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of card responses via the NFC interface. A crafted card response can trigger an overflow of a fixed-length stack-based buffer. An att… CWE-121Jul 29, 2026 | CVSS6.8v3.0 | EPSS0.228% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13306MEDIUM | Autel MaxiCharger AC Elite Home USB Authentication Bypass VulnerabilityAutel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed USB interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass auth… CWE-306Jul 29, 2026 | CVSS4.3v3.0 | EPSS0.183% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-13305MEDIUM | Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution VulnerabilityAutel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of proper validation of a user-supplied softwar… CWE-347Jul 29, 2026 | CVSS6.4v3.0 | EPSS0.121% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |