Описание
Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.
Ссылки
- Third Party AdvisoryExploit
Уязвимые конфигурации
Конфигурация 1Версия до 1.03.51 (включая)Версия до 1.03.51 (включая)
Одновременно
Одно из
cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:american_standard
cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:european_standard
cpe:2.3:h:autel:maxicharger_single_charger:-:*:*:*:*:*:*:*
EPSS
Процентиль: 20%
0.00276
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-1191
Связанные уязвимости
CVSS3: 6.8
github
около 2 месяцев назад
Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.
EPSS
Процентиль: 20%
0.00276
Низкий
6.8 Medium
CVSS3
Дефекты
CWE-1191