EV Chargers’ Shocking Secret: Liteon’s Password Blunder Exposed!
View CSAF: Liteon EV chargers are storing passwords in plain sight, practically begging for a security breach. With a CVSS v4 score of 8.7, this vulnerability could spark joy for hackers worldwide. LITEON has released firmware updates, so don’t be an easy target—upgrade before your charger becomes the neighborhood hotspot for cyber mischief.
Hot Take:
**_LITEON EV chargers storing passwords in plain sight? Looks like they took the concept of “going green” a bit too literally by recycling security blunders from the early 2000s._**
Key Points:
– LITEON’s EV chargers, IC48A and IC80A, have a vulnerability with a CVSS v4 score of 8.7.
– The flaw involves storing FTP-server-access credentials in plaintext within system logs.
– Affected chargers have firmware versions older than 01.00.19r for IC48A and 01.01.12e for IC80A.
– The vulnerability could allow attackers remote access to sensitive information.
– Mitigations include updating firmware and implementing robust network security measures.