Description
By manipulating the Signal Level Attenuation Characterization (SLAC)
protocol with spoofed measurements, an attacker can stage a
man-in-the-middle attack between an electric vehicle and chargers that
comply with the ISO 15118-2 part. This vulnerability may be exploitable
wirelessly, within close proximity, via electromagnetic induction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ISO 15118-2 Network and Application Protocol Requirements | EV Car Chargers | Part 15118-2 Network and Application Protocol Requirements | — |
Advisories 1
- ICSA-25-303-01 International Standards Organization ISO 15118-2 (Update A) CISA ICS & IT advisories · Mar 17, 2026