Autel records

23 published records for vendor autel.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 8
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

23 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
42Plan	CVE-2026-8985No exploit	Unauthenticated Command Injectionautel · maxicharger single charger firmware · CWE-78 pre-auth RCE Command injection	Critical10.0	—	7.0%	Jul 21, 2026
40Plan	CVE-2026-8984No exploit	Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.autel · maxicharger single charger firmware · CWE-94 pre-auth RCE	Critical10.0	—	0.9%	Jul 21, 2026
40Plan	CVE-2026-8983No exploit	Backdoor Authentication Tokenautel · maxicharger single charger firmware · CWE-798 Pre-auth Hard-coded credentials	Critical10.0	—	0.6%	Jul 21, 2026
40Plan	CVE-2026-8982No exploit	Hard-coded / Backdoor Accountsautel · maxicharger single charger firmware · CWE-798 Pre-auth Hard-coded credentials	Critical10.0	—	0.4%	Jul 21, 2026
39Monitor	CVE-2026-8986No exploit	Command Injection via Malicious OCPP Serverautel · maxicharger single charger firmware · CWE-78 pre-auth RCE Command injection	Critical9.5	—	3.2%	Jul 21, 2026
37Monitor	CVE-2026-8987No exploit	Authenticated Heap Overflowautel · maxicharger single charger firmware · CWE-122 RCE Memory safety	Critical9.4	—	0.6%	Jul 21, 2026
35Monitor	CVE-2024-23957No exploit	Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.9%	Sep 28, 2024
35Monitor	CVE-2024-23958No exploit	Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-798 Pre-auth Auth bypass Hard-coded credentials	High8.8	—	0.7%	Sep 28, 2024
35Monitor	CVE-2024-7795No exploit	Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.5%	Aug 21, 2024
35Monitor	CVE-2025-5822No exploit	Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Jun 25, 2025
35Monitor	CVE-2025-5830No exploit	Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.3%	Jun 25, 2025
35Monitor	CVE-2025-5827No exploit	Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.3%	Jun 25, 2025
34Monitor	CVE-2026-8989No exploit	Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recoautel · maxicharger single charger firmware · CWE-1191	High8.6	—	0.2%	Jul 21, 2026
34Monitor	CVE-2026-8988No exploit	Access to Bootloaderautel · maxicharger single charger firmware · CWE-1191	High8.6	—	0.2%	Jul 21, 2026
32Monitor	CVE-2024-23967No exploit	Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 RCE Memory safety	High8.0	—	0.9%	Sep 28, 2024
32Monitor	CVE-2024-23959No exploit	Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 RCE Memory safety	High8.0	—	0.8%	Sep 28, 2024
30Monitor	CVE-2025-6678No exploit	Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-306 Pre-auth Auth bypass	High7.5	—	0.4%	Jun 25, 2025
30Monitor	CVE-2025-5825No exploit	Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-1328 pre-auth RCE	High7.5	—	0.2%	Jun 25, 2025
30Monitor	CVE-2025-5824No exploit	Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-346 Pre-auth Auth bypass	High7.5	—	0.1%	Jun 25, 2025
27Monitor	CVE-2025-5828No exploit	Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-120 RCE Memory safety	Medium6.8	—	0.3%	Jun 25, 2025
27Monitor	CVE-2025-5829No exploit	Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-121 RCE Memory safety	Medium6.8	—	0.3%	Jun 25, 2025
26Monitor	CVE-2025-5823No exploit	Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-749	Medium6.5	—	0.5%	Jun 25, 2025
25Monitor	CVE-2025-5826No exploit	Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerabilityautel · maxicharger ac elite business c50 firmware · CWE-115 Pre-auth	Medium6.3	—	0.2%	Jun 25, 2025

CVE-2026-8985
42Plan
Unauthenticated Command Injection
CriticalCVSS 10.0No exploitEPSS 7%
- pre-auth RCE
- Command injection
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8984
40Plan
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8983
40Plan
Backdoor Authentication Token
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8982
40Plan
Hard-coded / Backdoor Accounts
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8986
39Monitor
Command Injection via Malicious OCPP Server
CriticalCVSS 9.5No exploitEPSS 3%
- pre-auth RCE
- Command injection
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8987
37Monitor
Authenticated Heap Overflow
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Memory safety
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2024-23957
35Monitor
Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareSep 28, 2024
CVE-2024-23958
35Monitor
Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
autel · maxicharger ac elite business c50 firmwareSep 28, 2024
CVE-2024-7795
35Monitor
Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareAug 21, 2024
CVE-2025-5822
35Monitor
Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5830
35Monitor
Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5827
35Monitor
Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2026-8989
34Monitor
Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware reco
HighCVSS 8.6No exploitEPSS 0%
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2026-8988
34Monitor
Access to Bootloader
HighCVSS 8.6No exploitEPSS 0%
autel · maxicharger single charger firmwareJul 21, 2026
CVE-2024-23967
32Monitor
Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareSep 28, 2024
CVE-2024-23959
32Monitor
Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareSep 28, 2024
CVE-2025-6678
30Monitor
Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5825
30Monitor
Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5824
30Monitor
Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5828
27Monitor
Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5829
27Monitor
Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Memory safety
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5823
26Monitor
Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability
MediumCVSS 6.5No exploitEPSS 0%
autel · maxicharger ac elite business c50 firmwareJun 25, 2025
CVE-2025-5826
25Monitor
Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
autel · maxicharger ac elite business c50 firmwareJun 25, 2025