Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311353 - https://vuldb.com/?ctiid.311353 - https://vuldb.com/?submit.591270 - https://lavender-bicycle-a5a.notion.site/Tenda-AC8-fromSetWirelessRepeat-20a53a41781f803d9156f0babaf94fca?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-5800 State: PUBLISHED Published: 2025-07-18T05:24:00.733Z Last Updated: 2025-07-18T14:01:11.966Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: juiiee8487 Products: Testimonial Post type Problem Types: CWE-79 Description: The Testimonial Post type plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Addit
s and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cd3fe254-e8cb-450b-901b-fdf49209013f?source=cve - https://plugins.trac.wordpress.org/browser/testimonial-post-type/trunk/testimonial-post-type.php#L146 - https://wordpress.org/plugins/testimonial-post-type/#developers
CVE ID: CVE-2025-5801 State: PUBLISHED Published: 2025-09-11T07:24:52.896Z Last Updated: 2025-09-11T14:40:23.861Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rejuancse Products: Digital Events Calendar Problem Types: CWE-79 Description: The Digital Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘column’ parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Addit
s and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/424c23f7-73a4-4b2b-8f52-61cb45523396?source=cve - https://plugins.trac.wordpress.org/browser/digital-events-calendar/trunk/shortcode/Events_List.php#L33 - https://wordpress.org/plugins/digital-events-calendar/#developers
CVE ID: CVE-2025-5803 State: PUBLISHED Published: 2025-11-06T15:54:18.609Z Last Updated: 2025-11-13T10:33:42.660Z Vendors: e4jvikwp Products: VikBooking Hotel Booking Engine & PMS Problem Types: CWE-862 Description: Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/vikbooking/vulnerability/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-8-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-5806 State: PUBLISHED Published: 2025-06-06T13:32:08.219Z Last Updated: 2025-06-06T16:03:44.179Z Vendors: Jenkins Project Products: Jenkins Gatling Plugin Description: Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2025-06-06/#SECURITY-3588
CVE ID: CVE-2025-5807 State: PUBLISHED Published: 2025-07-10T01:43:43.992Z Last Updated: 2025-07-10T13:12:07.846Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mpol Products: Gwolle Guestbook Problem Types: CWE-79 Description: The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwolle_gb_content’ parameter in all versions up to, and including, 4.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/956f86c5-05af-41c3-a779-5b25f62122dd?source=cve - https://plugins.trac.wordpress.org/changeset/3316455/
CVE ID: CVE-2025-5808 State: PUBLISHED Published: 2025-08-29T15:38:49.847Z Last Updated: 2025-08-29T15:59:44.852Z Vendors: OpenText Products: Self Service Password Reset Problem Types: CWE-1284 Description: Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.microfocus.com/doc/28/4.8/scrtyimpr
CVE ID: CVE-2025-5811 State: PUBLISHED Published: 2025-07-18T05:24:01.146Z Last Updated: 2025-07-18T14:00:33.209Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: milanmk Products: Listly: Listicles For WordPress Problem Types: CWE-862 Description: The Listly: Listicles For WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Init() function in all versions up to, and including, 2.7. This makes it possible for unauthenticated attackers to delete arbitrary transient values on the WordPress site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat
on the WordPress site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ee6749f5-1dd0-4687-9a86-64fd1161321b?source=cve - https://plugins.trac.wordpress.org/browser/listly/trunk/listly.php#L151 - https://wordpress.org/plugins/listly/
CVE ID: CVE-2025-5812 State: PUBLISHED Published: 2025-06-26T02:06:33.607Z Last Updated: 2025-06-27T14:52:29.457Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: vgwort Products: VG WORT METIS Problem Types: CWE-862 Description: The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update limited post settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/v
post settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b9edcbdc-5b01-4880-95ec-57d87ccbb472?source=cve - https://plugins.trac.wordpress.org/browser/vgw-metis/trunk/classes/admin.php#L422
CVE ID: CVE-2025-5813 State: PUBLISHED Published: 2025-06-26T02:22:22.986Z Last Updated: 2025-06-26T13:22:38.596Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: suhailahmad64 Products: Amazon Products to WooCommerce Problem Types: CWE-862 Description: The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2w_get_amazon_product_callback() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to create new produces. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat
o create new produces. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a0906540-46fc-4f76-9265-cb87c6340fad?source=cve - https://plugins.trac.wordpress.org/browser/import-products-to-wc/trunk/inc/functions.php#L266
CVE ID: CVE-2025-5814 State: PUBLISHED Published: 2025-06-07T04:22:07.365Z Last Updated: 2025-06-09T15:11:50.677Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: switcorp Products: Profiler – What Slowing Down Your WP Problem Types: CWE-862 Description: The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsd_plugin_control() function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to reactivate previously deactivated plugins after accessing the "Profiler" page. Additional Analyst Notes: - CISA ADP Vulnrichme
vate previously deactivated plugins after accessing the "Profiler" page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9213db60-c0c1-44a9-9b8c-621029c3a08f?source=cve - https://plugins.trac.wordpress.org/browser/profiler-what-slowing-down/trunk/actions.php#L31
CVE ID: CVE-2025-5815 State: PUBLISHED Published: 2025-06-13T03:41:44.276Z Last Updated: 2025-06-13T19:06:43.240Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: dmitriamartin Products: Traffic Monitor Problem Types: CWE-862 Description: The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcm_maybe_set_bot_flags() function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/538669c7-3237
st Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/538669c7-3237-4059-85dc-4f4af1ff5a19?source=cve - https://plugins.trac.wordpress.org/browser/traffic-monitor/trunk/traffic-monitor.php#L74 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3309996%40traffic-monitor&new=3309996%40traffic-monitor&sfp_email=&sfph_mail=
CVE ID: CVE-2025-5816 State: PUBLISHED Published: 2025-07-18T04:23:01.362Z Last Updated: 2025-07-18T13:53:42.530Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: biteship Products: Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship Problem Types: CWE-862 Description: The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.0 via the get_order_detail() due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user'
led key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's orders. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/48509d43-57bb-452c-b39b-905354a273f3?source=cve - https://plugins.trac.wordpress.org/browser/biteship/trunk/public/class-biteship-public.php#L327 - https://plugins.trac.wordpress.org/browser/biteship/trunk/includes/class-biteship.php#L515
CVE ID: CVE-2025-5817 State: PUBLISHED Published: 2025-07-02T03:47:24.666Z Last Updated: 2025-07-02T13:18:38.235Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: suhailahmad64 Products: Amazon Products to WooCommerce Problem Types: CWE-918 Description: The Amazon Products to WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.7 via the wcta2w_get_urls(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP
pplication and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5055cf24-14c7-4533-8900-a5f4c1435201?source=cve - https://plugins.trac.wordpress.org/browser/import-products-to-wc/trunk/inc/urls-ajax.php#L28
CVE ID: CVE-2025-5818 State: PUBLISHED Published: 2025-07-23T02:24:38.208Z Last Updated: 2025-07-23T15:57:40.196Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: krasenslavov Products: Featured Image Plus – Quick & Bulk Edit with Unsplash Problem Types: CWE-918 Description: The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.4 via the fip_get_image_options() function. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application and c
nistrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6904f168-e06f-4f17-905b-a943a39dfbdb?source=cve - https://plugins.trac.wordpress.org/browser/featured-image-plus/trunk/inc/admin/block-editor/block-editor-actions.php#L166
CVE ID: CVE-2025-5819 State: PUBLISHED Published: 2025-08-13T17:26:45.482Z Last Updated: 2025-08-29T16:23:04.943Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-732 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/548165 - https://hackerone.com/reports/3137660
CVE ID: CVE-2025-5820 State: PUBLISHED Published: 2025-06-21T00:09:44.306Z Last Updated: 2025-06-23T14:48:00.503Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Sony Products: XAV-AX8500 Problem Types: CWE-288 Description: Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of Bluetooth ERTM channel communication. The issue results from improper channel data initialization. An attacker can leverage this vulner
channel communication. The issue results from improper channel data initialization. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26285. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-358/ - https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax8500/software/00344092
CVE ID: CVE-2025-5821 State: PUBLISHED Published: 2025-08-23T06:43:35.611Z Last Updated: 2025-08-25T18:17:24.250Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Case-Themes Products: Case Theme User Problem Types: CWE-288 Description: The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site, and access to the
ted attackers to log in as administrative users, as long as they have an existing account on the site, and access to the administrative user's email. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3ce95a04-11bd-488e-ad25-1b661e083eb2?source=cve - https://themeforest.net/item/consultio-consulting-business-wordpress/25376496
CVE ID: CVE-2025-5822 State: PUBLISHED Published: 2025-06-25T18:00:49.179Z Last Updated: 2025-06-26T13:18:05.218Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-863 Description: Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain a low-privileged authorization token in order to exploit this vulnerability. The specific flaw exists within the im
tain a low-privileged authorization token in order to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-26325. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-340/
CVE ID: CVE-2025-5823 State: PUBLISHED Published: 2025-06-25T18:01:07.948Z Last Updated: 2025-06-26T13:17:04.941Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-749 Description: Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API
s required to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-26351. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-341/
CVE ID: CVE-2025-5824 State: PUBLISHED Published: 2025-06-25T17:59:54.446Z Last Updated: 2025-06-25T18:21:28.310Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-346 Description: Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exist
pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the handling of bluetooth pairing requests. The issue results from insufficient validation of the origin of commands. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26353. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-343/
CVE ID: CVE-2025-5825 State: PUBLISHED Published: 2025-06-25T18:02:18.293Z Last Updated: 2025-06-25T18:18:01.073Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-1328 Description: Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The spec
the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the firmware update process. The issue results from the lack of proper validation of a firmware image before using it to perform an upgrade. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the device. Was ZDI-CAN-26354. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-344/
CVE ID: CVE-2025-5826 State: PUBLISHED Published: 2025-06-25T18:00:38.520Z Last Updated: 2025-06-26T13:18:35.182Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-115 Description: Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability. This vulnerability allows network-adjacent attackers to inject arbitrary AT commands on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ble_process_esp32_msg function. The i
is not required to exploit this vulnerability. The specific flaw exists within the ble_process_esp32_msg function. The issue results from misinterpretation of input data. An attacker can leverage this vulnerability to execute AT commands in the context of the device. Was ZDI-CAN-26368. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-345/
CVE ID: CVE-2025-5827 State: PUBLISHED Published: 2025-06-25T18:00:54.449Z Last Updated: 2025-06-26T13:17:21.331Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Autel Products: Autel MaxiCharger AC Wallbox Commercial Problem Types: CWE-121 Description: Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ble_process_esp32_msg functi
tication is not required to exploit this vulnerability. The specific flaw exists within the ble_process_esp32_msg function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26369. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-346/