Catalin Cimpanu on Nostr: Security firm Sector7 says it discovered a backdoor feature in Autel MaxiCharger EV ...

Security firm Sector7 says it discovered a backdoor feature in Autel MaxiCharger EV chargers that can grant attackers control over the device.

The backdoor is a hard-coded authentication token in the Bluetooth pairing process.

Sector7 researchers believe the backdoor token was intentional.

https://sector7.computest.nl/post/2024-08-pwn2own-automotive-autel-maxicharger/