CVE & CISA-KEV Catalog

CVE-2025-5823

MEDIUM

6.5

CVSS v3

Description

Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the Autel Technician API. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-26351.

How to fix

Remediation Available

maxicharger ac elite business c50 firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger ac pro firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger ac ultra firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger dc compact mobile firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger dc compact pedestal firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger dc fast firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger dc hipower firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger dh480 firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

maxicharger single charger firmwareNVD

Affected:< 1.39.51Fixed in:1.39.51CVE-2025-5823derived from NVD

Affected:< 1.56.51Fixed in:1.56.51CVE-2025-5823derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploit Intelligence

0.45%probability of exploitation in 30 days

36thpercentile

Low risk: more likely to be exploited than 36% of all known CVEs.

References

Third-Party Advisory1

zerodayinitiative.com

Embed a live status badge for CVE-2025-5823

Markdown

[![CVE-2025-5823](https://tridentstack.com/cve/badge/CVE-2025-5823.svg)](https://tridentstack.com/cve/CVE-2025-5823)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-5823"><img src="https://tridentstack.com/cve/badge/CVE-2025-5823.svg" alt="CVE-2025-5823"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-09-10.