The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addre…
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the networ…
A POST request sent to a specific webserver endpoint can be used to write to arbitrary file locations. The endpoint accepts the filename parameter in the Conte…
The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakag…
The firmware update mechanism does not include cryptographic signature validation. This allows anyone with access to the firmware update capability to upload a…
The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading fi…
The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. This allows an attacker o…