Remote Code Execution Vulnerability in Autel MaxiCharger AC Wallbox by Autel

CVE-2025-5827

What is CVE-2025-5827?

A vulnerability exists in the Autel MaxiCharger AC Wallbox Commercial where improper validation of user-supplied data length can lead to a stack-based buffer overflow. This flaw allows network-adjacent attackers to execute arbitrary code without authentication, potentially compromising the device and the network it operates on. The vulnerability is specifically related to the ble_process_esp32_msg function, where insufficient checks can be exploited to run malicious payloads.

References