FKIE_CVE-2025-5822
Vulnerability from fkie_nvd - Published: 2025-06-25 18:15 - Updated: 2025-09-10 14:46
Severity ?
Summary
Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability.
The specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325.
References
| URL | Tags | ||
|---|---|---|---|
| zdi-disclosures@trendmicro.com | https://www.zerodayinitiative.com/advisories/ZDI-25-340/ | Third Party Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "0C17A950-221C-41E3-9BE3-31736CE4516F",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "42F0DDFA-A1B9-4EC2-8F43-3261F9BCE814",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_ac_elite_business_c50:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5B2F9001-71B7-4B39-9114-FC54F4EAE9E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_pro_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "9471EA48-BD48-40AA-8FF7-28503D04D1F0",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_pro_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "72FB45A6-E876-45A6-A39F-4E0B28620A71",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_ac_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "92CF3B40-B18F-4C4D-8A6C-68A8B1F288AE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "55C717AF-39F9-4080-AE56-7511E0F62F79",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "7AFD91E7-E581-451B-AB15-099AA7A4F611",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_ac_ultra:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CDC6E5EB-C4D4-4488-B01B-C0E568FCA0D1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "2C9AEB54-FFBC-4B24-AC7B-1B5F3CC762DF",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "BBFCD8D0-53E7-4B06-B763-36381E13DD26",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_dc_compact_mobile:-:*:*:*:*:*:*:*",
"matchCriteriaId": "52578631-C18D-4244-9377-AB787EDE08A1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "FED7B2BF-5D38-4393-9986-588407A3476D",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "3244FD64-1714-4597-BA66-CC5FC8D514FF",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_dc_compact_pedestal:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ED75BBD9-D889-49D3-95B0-EF6F15B65E10",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_fast_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "264E7F9D-0603-43C9-B7A9-6A35EA8F0063",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_fast_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "E5F4FE58-5AA6-45D0-AE48-959DA0CF53C8",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_dc_fast:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6C8B42B3-3F66-426F-8FFE-993FCAA12EB4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "E30E7592-29C4-4333-A02C-7468074BD104",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "F9058C73-831E-48BF-AE9B-19AB33F10F14",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_dc_hipower:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EE5DF603-DBD2-4AFF-AE3D-946277C2C6C2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_dh480_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "33F4A529-54C4-4EBC-871E-5E0C71859F69",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_dh480_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "62718E33-B591-49D4-8CC6-057D6254873A",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_dh480:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CAD62E93-8613-48DF-9C42-B12655FE1680",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:american_standard",
"matchCriteriaId": "372D3478-67AA-4D41-908C-5CFE6CAA25A8",
"versionEndExcluding": "1.39.51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:european_standard",
"matchCriteriaId": "8ED07235-5610-4E80-8940-6EB942CC648C",
"versionEndExcluding": "1.56.51",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:autel:maxicharger_single_charger:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0E6B2074-D4A6-424F-B7C5-40A0FE5C17F8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325."
},
{
"lang": "es",
"value": "Vulnerabilidad de escalada de privilegios de autorizaci\u00f3n incorrecta en la API de Autel MaxiCharger AC Wallbox Commercial Technician. Esta vulnerabilidad permite a atacantes remotos escalar privilegios en las instalaciones afectadas de las estaciones de carga Autel MaxiCharger AC Wallbox Commercial. Para explotar esta vulnerabilidad, un atacante debe obtener primero un token de autorizaci\u00f3n con privilegios bajos. La falla espec\u00edfica se encuentra en la implementaci\u00f3n de la API de Autel Technician. El problema se debe a una autorizaci\u00f3n incorrecta. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios a recursos que normalmente estar\u00edan protegidos del usuario. La vulnerabilidad era ZDI-CAN-26325."
}
],
"id": "CVE-2025-5822",
"lastModified": "2025-09-10T14:46:51.023",
"metrics": {
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.0"
},
"exploitabilityScore": 2.8,
"impactScore": 4.2,
"source": "zdi-disclosures@trendmicro.com",
"type": "Secondary"
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2025-06-25T18:15:22.900",
"references": [
{
"source": "zdi-disclosures@trendmicro.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-340/"
}
],
"sourceIdentifier": "zdi-disclosures@trendmicro.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-863"
}
],
"source": "zdi-disclosures@trendmicro.com",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…