Remote Code Execution Vulnerability in Autel MaxiCharger AC Wallbox by Autel

CVE-2025-5825

What is CVE-2025-5825?

The Autel MaxiCharger AC Wallbox is susceptible to a vulnerability that allows network-adjacent attackers to execute arbitrary code. Exploitation requires the attacker to pair a malicious Bluetooth device with the target charging station. The vulnerability stems from improper validation of firmware images during the update process, enabling attackers to deploy harmful firmware and compromise the device. This issue highlights significant security risks in device firmware management, particularly in environments relying on remote access for updates.

References