HIGH🇵🇱 Wersja polska

CVE-2025-5749

CVSS 8.8v3.1pub. 2025-06-06upd. 2025-08-14

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of cryptographic keys used in vendor-specific encrypted communications. The issue results from the lack of proper initialization of a variable prior to accessing it. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26295.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Wolfbox Level 2 Ev Charger

    HW
    Wolfbox
    wszystkie wersje

  • Wolfbox Level 2 Ev Charger Firmware

    OS
    Wolfbox
    3.1.17
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2025-5747HIGH8.0ten sam produkt

WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability....

CVE-2025-5748HIGH8.0ten sam produkt

WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerab...

CVE-2025-5750HIGH8.8ten sam produkt

WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Executi...

CVE-2025-5751MEDIUM6.8ten sam produkt

WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability. This vu...