EV car chargers hacked to execute code by researchers

TLDR:

• Researchers hacked EV car chargers at Pwn2Own Automotive 2024 event to execute arbitrary code.
• They exploited vulnerabilities in Autel MaxiCharger, ChargePoint Home Flex, and JuiceBox 40 Smart EV Charging Station.

Researchers at the Pwn2Own Automotive 2024 event in Tokyo successfully hacked EV car chargers to execute arbitrary code. The vulnerabilities were exploited in the Autel MaxiCharger, ChargePoint Home Flex, and JuiceBox 40 Smart EV Charging Station. The researchers uncovered critical vulnerabilities in the Autel MaxiCharger through reverse-engineering its firmware, allowing them to bypass security measures and potentially manipulate charging parameters. This highlights significant security concerns in EV charging infrastructure.