CVE-2026-8982

Katalog CVE

CVSS 8.1 · High EPSS 0,48%

Kerentanan Use of Hard-coded Credentials pada autel maxicharger single charger firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-specific values, allowing an attacker with knowledge of the algorithm and required inputs to authenticate to the web management interface with administrative privileges.

Rincian

Terbit di NVD

21 Juli 2026

Terakhir diubah

12 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/ exploit · advisory pihak ketiga