Authentication Bypass in Autel MaxiCharger AC Wallbox by Autel
CVE-2025-6678

7.5HIGH

Key Information:

Vendor

Autel

Status
Autel Maxicharger Ac Wallbox Commercial
Vendor
CVE Published:
25 June 2025

What is CVE-2025-6678?

The Autel MaxiCharger AC Wallbox Commercial is affected by a vulnerability that facilitates unauthorized disclosure of sensitive information due to missing authentication mechanisms within the Pile API. This flaw allows remote attackers to access functionalities that can lead to credential exposure and potential further compromises of the affected installations. Security measures should be implemented to mitigate the risks associated with this vulnerability.

Affected Version(s)

Autel MaxiCharger AC Wallbox Commercial 1.36.00

References

https://www.zerodayinitiative.com/advisories/ZDI-25-342/
x_research-advisory

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-6678 : Authentication Bypass in Autel MaxiCharger AC Wallbox by Autel