Stack-based Buffer Overflow in Autel MaxiCharger AC Wallbox Commercial EV Chargers
CVE-2025-5829

6.8MEDIUM

Key Information:

Vendor

Autel

Status
Autel Maxicharger Ac Wallbox Commercial
Vendor
CVE Published:
25 June 2025

What is CVE-2025-5829?

The Autel MaxiCharger AC Wallbox Commercial EV charger contains a vulnerability that could allow unauthorized individuals to execute arbitrary code. This issue stems from improper handling of JSON messages, specifically due to the insufficient validation of user-supplied data before it's copied to a fixed-length buffer. As a result, an attacker with physical access to the device could exploit this vulnerability to operate within its context without needing authentication.

Affected Version(s)

Autel MaxiCharger AC Wallbox Commercial 1.36.00

References

https://www.zerodayinitiative.com/advisories/ZDI-25-348/
x_research-advisory

CVSS V3.0

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-5829 : Stack-based Buffer Overflow in Autel MaxiCharger AC Wallbox Commercial EV Chargers