CVE-2025-12357
HIGHISO 15118-2 - Man-in-the-Middle
Title source: llmDescription
By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.
References (3)
Scores
CVSS v3
8.3
EPSS
0.0003
EPSS Percentile
6.3%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Classification
CWE
CWE-923
Status
draft
Timeline
Published
Oct 31, 2025
Tracked Since
Feb 18, 2026