Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Autel — Vulnerabilities & Security Advisories 28

Browse all 28 CVE security advisories affecting Autel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Autel specializes in automotive diagnostic tools and equipment, serving mechanics and vehicle owners. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from web interfaces and mobile applications. Security assessments reveal insufficient input validation and insecure authentication mechanisms. While no major public incidents have been widely documented, the 15 CVEs indicate persistent security challenges in their connected diagnostic platforms. The company's focus on functionality has sometimes overshadowed security considerations, leaving exposed attack surfaces that could compromise vehicle systems or user data.

CVE ID Title CVSS Severity Published
CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability — MaxiCharger AC Elite Home CWE-191 - - 2026-07-29
CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability — MaxiCharger AC Elite Home CWE-122 - - 2026-07-29
CVE-2026-13309 Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability — MaxiCharger AC Elite Home CWE-121 - - 2026-07-29
CVE-2026-13306 Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability — MaxiCharger AC Elite Home CWE-306 - - 2026-07-29
CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability — MaxiCharger AC Elite Home CWE-347 - - 2026-07-29
CVE-2026-8989 Open Recovery Mode — MaxiCharger Single CWE-1191 - - 2026-07-21
CVE-2026-8988 Access to Bootloader — MaxiCharger Single CWE-1191 - - 2026-07-21
CVE-2026-8987 Authenticated Heap Overflow — MaxiCharger Single CWE-122 - - 2026-07-21
CVE-2026-8986 Command Injection via Malicious OCPP Server — MaxiCharger Single CWE-78 - - 2026-07-21
CVE-2026-8985 Unauthenticated Command Injection — MaxiCharger Single CWE-78 - - 2026-07-21
CVE-2026-8984 Unauthenticated RCE — MaxiCharger Single CWE-94 - - 2026-07-21
CVE-2026-8983 Backdoor Authentication Token — MaxiCharger Single CWE-798 - - 2026-07-21
CVE-2026-8982 Hard-coded / Backdoor Accounts — MaxiCharger Single CWE-798 - - 2026-07-21
CVE-2025-5825 Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-1328 7.5AI High AI 2025-06-25
CVE-2025-6678 Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-306 7.5AI High AI 2025-06-25
CVE-2025-5830 Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-122 8.8AI High AI 2025-06-25
CVE-2025-5829 Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-121 6.8AI Medium AI 2025-06-25
CVE-2025-5823 Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-749 6.5AI Medium AI 2025-06-25
CVE-2025-5827 Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-121 8.8AI High AI 2025-06-25
CVE-2025-5822 Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-863 8.8AI High AI 2025-06-25
CVE-2025-5828 Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-120 6.8AI Medium AI 2025-06-25
CVE-2025-5826 Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-115 8.8AI High AI 2025-06-25
CVE-2025-5824 Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability — Autel MaxiCharger AC Wallbox Commercial CWE-346 8.8AI High AI 2025-06-25
CVE-2024-23959 Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability — MaxiCharger AC Elite Business C50 CWE-121 8.0 High 2024-09-28
CVE-2024-23967 Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability — MaxiCharger AC Elite Business C50 CWE-121 8.0 High 2024-09-28
CVE-2024-23958 Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability — MaxiCharger AC Elite Business C50 CWE-798 6.5 Medium 2024-09-28
CVE-2024-23957 Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability — MaxiCharger AC Elite Business C50 CWE-121 8.8 High 2024-09-28
CVE-2024-7795 Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability — MaxiCharger AC Elite Business C50 CWE-121 8.8AI High AI 2024-08-21

This page lists every published CVE security advisory associated with Autel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.