CVE-2025-5751: (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability
This vulnerability allows physically present attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of management cards. The issue results from the lack of personalization of management cards. An attacker can leverage this vulnerability to bypass authentication on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5751?
CVE-2025-5751 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to WOLFBOX Level 2 EV Chargers.
How do I fix CVE-2025-5751?
To mitigate CVE-2025-5751, update to the latest firmware provided by WOLFBOX that addresses this authentication bypass issue.
Who is affected by CVE-2025-5751?
Users of the WOLFBOX Level 2 EV Charger are affected by CVE-2025-5751 if they are running vulnerable versions.
Can CVE-2025-5751 be exploited remotely?
CVE-2025-5751 requires physical presence to exploit, as it targets the management card access directly.
What specific issue does CVE-2025-5751 involve?
CVE-2025-5751 involves a flaw in the handling of management cards that allows attackers to bypass authentication.