Information Disclosure Vulnerability in Autel MaxiCharger AC Wallbox by Autel

CVE-2025-5823

What is CVE-2025-5823?

The Autel MaxiCharger AC Wallbox exhibits a vulnerability within its Technician API that can be exploited by unauthorized remote attackers. This flaw arises from the presence of an exposed dangerous method, which permits the disclosure of sensitive installation information, including credentials. Consequently, such a breach can facilitate unauthorized access, potentially leading to further exploitation of the system. It is crucial for users and administrators of affected devices to take preventive measures to mitigate this risk and safeguard their electric vehicle charging operations.

References