CVE-2026-8983

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:autel:maxicharger_single_charger_firmware:::::::*:american_standard
	cpe:2.3:o:autel:maxicharger_single_charger_firmware:::::::*:european_standard

cpe:2.3:h:autel:maxicharger_single_charger:-:*:*:*:*:*:*:*

History

24 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) El firmware Autel Maxi Charger Single hasta la versión V1.03.51 contiene un token de autenticación codificado de forma rígida que omite las comprobaciones de autorización para múltiples puntos finales de gestión. Un atacante puede proporcionar el valor del token especial para invocar funcionalidad privilegiada sin autenticación válida.

Information

Published : 2026-07-21 21:16

Updated : 2026-10-24 19:10

NVD link : CVE-2026-8983

Mitre link : CVE-2026-8983

CVE.ORG link : CVE-2026-8983

JSON object : View

Products Affected

autel

maxicharger_single_charger
maxicharger_single_charger_firmware

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2026-8983", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8983", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T19:25:03.838770Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "office@cyberdanube.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 10.0, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "office@cyberdanube.com", "affectedData": [{"vendor": "Autel", "product": "MaxiCharger Single", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "V1.03.51"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-21T21:16:54.837", "references": [{"url": "https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/", "tags": ["Exploit", "Third Party Advisory"], "source": "office@cyberdanube.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "office@cyberdanube.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication."}, {"lang": "es", "value": "El firmware Autel Maxi Charger Single hasta la versi\u00f3n V1.03.51 contiene un token de autenticaci\u00f3n codificado de forma r\u00edgida que omite las comprobaciones de autorizaci\u00f3n para m\u00faltiples puntos finales de gesti\u00f3n. Un atacante puede proporcionar el valor del token especial para invocar funcionalidad privilegiada sin autenticaci\u00f3n v\u00e1lida."}], "lastModified": "2026-10-24T19:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:american_standard", "vulnerable": true, "matchCriteriaId": "D41DC0CB-0C3C-4FC7-9EB1-FA708DB6ACB8", "versionEndIncluding": "1.03.51"}, {"criteria": "cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:european_standard", "vulnerable": true, "matchCriteriaId": "7F7C8F4C-1085-4D08-8A7D-6EFA75B66C58", "versionEndIncluding": "1.03.51"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:autel:maxicharger_single_charger:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0E6B2074-D4A6-424F-B7C5-40A0FE5C17F8"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "office@cyberdanube.com"}