Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
同じ Autel 充電器に、認可検査を迂回するハードコードされた認証トークン。特別な値を送るだけで管理機能を未認証で呼べます。厄介なのは、管理画面のパスワードを強くしても消えないこと。埋め込まれた資格情報はファームウェア更新でしか取り除けません。 https://cve.autoarticles.net/cve/CVE-2026-8983
Post summary
The post highlights a hard‑coded auth token in Autel chargers that bypasses authorization and notes that removing the embedded credentials requires a firmware update, implying a vendor patch is needed.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | autel | maxicharger_single_charger | - | - | - |
| OS | autel | maxicharger_single_charger_firmware | - | - | - |
| OS | autel | maxicharger_single_charger_firmware | - | - | - |