Buffer Overflow Vulnerability in Autel MaxiCharger AC Wallbox Commercial

CVE-2025-5828

What is CVE-2025-5828?

The Autel MaxiCharger AC Wallbox Commercial has a vulnerability that allows local attackers to perform remote code execution due to improper validation of the length of USB frame packets. Specifically, the flaw arises when user-supplied data is copied to a fixed-length buffer without adequate checks. As a result, malicious entities can exploit this oversight to execute arbitrary code on the device, posing significant security risks. It is essential for users and operators to ensure proper protections are in place to mitigate the potential impact of this vulnerability.

References