CVE-2025-5822 (GCVE-0-2025-5822)

Vulnerability from cvelistv5 – Published: 2025-06-25 18:00 – Updated: 2025-06-26 13:18
VLAI?
Summary
Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325.
Severity ?
7.1 (High)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CWE
  • CWE-863 - Incorrect Authorization
Assigner
zdi
References
Impacted products
Vendor Product Version
Autel Autel MaxiCharger AC Wallbox Commercial Affected: 1.36.00
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-5822",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-26T13:17:58.707658Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-26T13:18:05.218Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Autel MaxiCharger AC Wallbox Commercial",
          "vendor": "Autel",
          "versions": [
            {
              "status": "affected",
              "version": "1.36.00"
            }
          ]
        }
      ],
      "dateAssigned": "2025-06-06T19:16:34.709Z",
      "datePublic": "2025-06-11T17:26:56.849Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863: Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-25T18:00:49.179Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-25-340",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-340/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam)"
      },
      "title": "Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2025-5822",
    "datePublished": "2025-06-25T18:00:49.179Z",
    "dateReserved": "2025-06-06T19:16:34.664Z",
    "dateUpdated": "2025-06-26T13:18:05.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-5822\",\"sourceIdentifier\":\"zdi-disclosures@trendmicro.com\",\"published\":\"2025-06-25T18:15:22.900\",\"lastModified\":\"2025-09-10T14:46:51.023\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability.\\n\\nThe specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de escalada de privilegios de autorizaci\u00f3n incorrecta en la API de Autel MaxiCharger AC Wallbox Commercial Technician. Esta vulnerabilidad permite a atacantes remotos escalar privilegios en las instalaciones afectadas de las estaciones de carga Autel MaxiCharger AC Wallbox Commercial. Para explotar esta vulnerabilidad, un atacante debe obtener primero un token de autorizaci\u00f3n con privilegios bajos. La falla espec\u00edfica se encuentra en la implementaci\u00f3n de la API de Autel Technician. El problema se debe a una autorizaci\u00f3n incorrecta. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios a recursos que normalmente estar\u00edan protegidos del usuario. La vulnerabilidad era ZDI-CAN-26325.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV30\":[{\"source\":\"zdi-disclosures@trendmicro.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":4.2}]},\"weaknesses\":[{\"source\":\"zdi-disclosures@trendmicro.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"0C17A950-221C-41E3-9BE3-31736CE4516F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"42F0DDFA-A1B9-4EC2-8F43-3261F9BCE814\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_ac_elite_business_c50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B2F9001-71B7-4B39-9114-FC54F4EAE9E7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_pro_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"9471EA48-BD48-40AA-8FF7-28503D04D1F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_pro_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"72FB45A6-E876-45A6-A39F-4E0B28620A71\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_ac_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92CF3B40-B18F-4C4D-8A6C-68A8B1F288AE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"55C717AF-39F9-4080-AE56-7511E0F62F79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"7AFD91E7-E581-451B-AB15-099AA7A4F611\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_ac_ultra:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDC6E5EB-C4D4-4488-B01B-C0E568FCA0D1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"2C9AEB54-FFBC-4B24-AC7B-1B5F3CC762DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"BBFCD8D0-53E7-4B06-B763-36381E13DD26\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_dc_compact_mobile:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52578631-C18D-4244-9377-AB787EDE08A1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"FED7B2BF-5D38-4393-9986-588407A3476D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"3244FD64-1714-4597-BA66-CC5FC8D514FF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_dc_compact_pedestal:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED75BBD9-D889-49D3-95B0-EF6F15B65E10\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_fast_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"264E7F9D-0603-43C9-B7A9-6A35EA8F0063\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_fast_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"E5F4FE58-5AA6-45D0-AE48-959DA0CF53C8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_dc_fast:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C8B42B3-3F66-426F-8FFE-993FCAA12EB4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"E30E7592-29C4-4333-A02C-7468074BD104\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"F9058C73-831E-48BF-AE9B-19AB33F10F14\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_dc_hipower:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE5DF603-DBD2-4AFF-AE3D-946277C2C6C2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dh480_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"33F4A529-54C4-4EBC-871E-5E0C71859F69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_dh480_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"62718E33-B591-49D4-8CC6-057D6254873A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_dh480:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAD62E93-8613-48DF-9C42-B12655FE1680\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:american_standard\",\"versionEndExcluding\":\"1.39.51\",\"matchCriteriaId\":\"372D3478-67AA-4D41-908C-5CFE6CAA25A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:european_standard\",\"versionEndExcluding\":\"1.56.51\",\"matchCriteriaId\":\"8ED07235-5610-4E80-8940-6EB942CC648C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:autel:maxicharger_single_charger:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E6B2074-D4A6-424F-B7C5-40A0FE5C17F8\"}]}]}],\"references\":[{\"url\":\"https://www.zerodayinitiative.com/advisories/ZDI-25-340/\",\"source\":\"zdi-disclosures@trendmicro.com\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-5822\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-26T13:17:58.707658Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-26T13:18:01.808Z\"}}], \"cna\": {\"title\": \"Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability\", \"source\": {\"lang\": \"en\", \"value\": \"Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam)\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 7.1, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N\"}}], \"affected\": [{\"vendor\": \"Autel\", \"product\": \"Autel MaxiCharger AC Wallbox Commercial\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.36.00\"}], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2025-06-11T17:26:56.849Z\", \"references\": [{\"url\": \"https://www.zerodayinitiative.com/advisories/ZDI-25-340/\", \"name\": \"ZDI-25-340\", \"tags\": [\"x_research-advisory\"]}], \"dateAssigned\": \"2025-06-06T19:16:34.709Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability.\\n\\nThe specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"CWE-863: Incorrect Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"99f1926a-a320-47d8-bbb5-42feb611262e\", \"shortName\": \"zdi\", \"dateUpdated\": \"2025-06-25T18:00:49.179Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-5822\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-26T13:18:05.218Z\", \"dateReserved\": \"2025-06-06T19:16:34.664Z\", \"assignerOrgId\": \"99f1926a-a320-47d8-bbb5-42feb611262e\", \"datePublished\": \"2025-06-25T18:00:49.179Z\", \"assignerShortName\": \"zdi\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.