Heap-based Buffer Overflow Vulnerability in Autel MaxiCharger AC Wallbox EV Chargers

CVE-2025-5830

What is CVE-2025-5830?

A vulnerability exists in the Autel MaxiCharger AC Wallbox Commercial that permits network-adjacent attackers to execute arbitrary code. This arises from improper validation of the DLB_SlaveRegister message length, allowing attackers to exploit the heap-based buffer overflow. Due to the lack of authentication requirements, the risk of unauthorized code execution is significant, presenting a serious security threat to installations of these EV chargers.

References