https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 15:08:40 +0000 https://cve.radiocsirt.org/vuln/cve-2024-23958 <p><strong>Affected:</strong> Autel MaxiCharger AC Elite Business C50, autel maxicharger_ac_elite_business_c50_firmware, autel maxicharger_ac_elite_business_c50_eu_firmware</p> <p>Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the BLE AppAuthenRequest command handler. The handler uses hardcoded credentials as a fallback in case of an authentication request failure. An attacker can leverage this vulnerability to bypass authentication on the system.</p> <p>Was ZDI-CAN-23196</p> <p><strong>Affected:</strong> Autel MaxiCharger AC Elite Business C50, autel maxicharger_ac_elite_business_c50_firmware, autel maxicharger_ac_elite_business_c50_eu_firmware</p> <p>Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the BLE AppAuthenRequest command handler. The handler uses hardcoded credentials as a fallback in case of an authentication request failure. An attacker can leverage this vulnerability to bypass authentication on the system.</p> <p>Was ZDI-CAN-23196</p> https://cve.radiocsirt.org/vuln/cve-2024-23958