CVE-2025-5824 [High] | Authentication Bypass in Maxicharger Ac Elite Busi…

Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the handling of bluetooth pairing requests. The issue results from insufficient validation of the origin of commands. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26353.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-06-26	—	0.01%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-06-26

—

0.01%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
7.5	3.1	HIGH	`CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H` Click to expand Attack vector (AV:A) Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet. Attack complexity (AC:H) Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work. Privileges required (PR:N) No account or special rights needed—anonymous or random user is enough. User interaction (UI:N) Nobody has to click “OK” or open a trap file; it can work without a victim helping. Scope (S:U) Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems. Confidentiality (C:H) Serious risk that confidential data gets exposed in a big way. Integrity (I:H) They could widely tamper with or forge data—trust in the data is badly hurt. Availability (A:H) Could take the service down hard or make it unusable for people who depend on it.	1.6	5.9	[email protected]
5.0	3.0	MEDIUM	`CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L` Click to expand Attack vector (AV:A) Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet. Attack complexity (AC:H) Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work. Privileges required (PR:N) No account or special rights needed—anonymous or random user is enough. User interaction (UI:N) Nobody has to click “OK” or open a trap file; it can work without a victim helping. Scope (S:U) Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems. Confidentiality (C:L) Some sensitive info could get out, but not a total data dump. Integrity (I:L) Attackers could change some data, but it’s limited—not everything goes. Availability (A:L) Might cause slowdowns, glitches, or partial disruption—not a full brick.	1.6	3.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

7.5

3.1

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Click to expand

Attack vector (AV:A): Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet.
Attack complexity (AC:H): Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work.
Privileges required (PR:N): No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N): Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U): Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:H): Serious risk that confidential data gets exposed in a big way.
Integrity (I:H): They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:H): Could take the service down hard or make it unusable for people who depend on it.

1.6

5.9

[email protected]

5.0

3.0

MEDIUM

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Click to expand

Attack vector (AV:A): Attacker has to be nearby on the network—same office, same link, that vibe—not the whole wide internet.
Attack complexity (AC:H): Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work.
Privileges required (PR:N): No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N): Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U): Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:L): Some sensitive info could get out, but not a total data dump.
Integrity (I:L): Attackers could change some data, but it’s limited—not everything goes.
Availability (A:L): Might cause slowdowns, glitches, or partial disruption—not a full brick.

1.6

3.4

[email protected]

Affected software / configurations for CVE-2025-5824

Vendor	Product	Version	Raw CPE
autel	maxicharger_ac_elite_business_c50_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:::::::*:american_standard
autel	maxicharger_ac_elite_business_c50_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_ac_elite_business_c50_firmware:::::::*:european_standard
autel	maxicharger_ac_pro_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_ac_pro_firmware:::::::*:american_standard
autel	maxicharger_ac_pro_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_ac_pro_firmware:::::::*:european_standard
autel	maxicharger_ac_ultra_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:::::::*:american_standard
autel	maxicharger_ac_ultra_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_ac_ultra_firmware:::::::*:european_standard
autel	maxicharger_dc_compact_mobile_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:::::::*:american_standard
autel	maxicharger_dc_compact_mobile_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_dc_compact_mobile_firmware:::::::*:european_standard
autel	maxicharger_dc_compact_pedestal_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:::::::*:american_standard
autel	maxicharger_dc_compact_pedestal_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_dc_compact_pedestal_firmware:::::::*:european_standard
autel	maxicharger_dc_fast_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_dc_fast_firmware:::::::*:american_standard
autel	maxicharger_dc_fast_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_dc_fast_firmware:::::::*:european_standard
autel	maxicharger_dc_hipower_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:::::::*:american_standard
autel	maxicharger_dc_hipower_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_dc_hipower_firmware:::::::*:european_standard
autel	maxicharger_dh480_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_dh480_firmware:::::::*:american_standard
autel	maxicharger_dh480_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_dh480_firmware:::::::*:european_standard
autel	maxicharger_single_charger_firmware	< 1.39.51	cpe:2.3:o:autel:maxicharger_single_charger_firmware:::::::*:american_standard
autel	maxicharger_single_charger_firmware	< 1.56.51	cpe:2.3:o:autel:maxicharger_single_charger_firmware:::::::*:european_standard

References for CVE-2025-5824

URL	Tags
https://www.zerodayinitiative.com/advisories/ZDI-25-343/	Third Party Advisory

URL

CVE-2025-5824 | Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability

Exploit prediction scoring system (EPSS) score for CVE-2025-5824

Common vulnerability scoring system (CVSS) metrics for CVE-2025-5824

Weakness enumeration for CVE-2025-5824

Affected software / configurations for CVE-2025-5824

References for CVE-2025-5824