ZDI-CAN-26349: ZDI-25-327: (0Day) (Pwn2Own) WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Tuya communications module software. The issue results from the exposure of a method allowing the upload of crafted software images to the module. An attacker can leverage this vulnerability to execute code in the context of the device.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2025-5748.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26349?
The severity of ZDI-CAN-26349 is critical due to its ability to allow arbitrary code execution.
How do I fix ZDI-CAN-26349?
To fix ZDI-CAN-26349, update the WOLFBOX Level 2 EV Charger to the latest firmware version addressing the vulnerability.
Who is affected by ZDI-CAN-26349?
Users of the WOLFBOX Level 2 EV Charger are affected by the ZDI-CAN-26349 vulnerability.
What type of attacks can be carried out using ZDI-CAN-26349?
ZDI-CAN-26349 allows network-adjacent attackers to execute arbitrary code on the vulnerable device.
Is authentication required to exploit ZDI-CAN-26349?
Yes, authentication is required to exploit ZDI-CAN-26349, but it can be bypassed.