Description
The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EVbee | DC-80 | < 1.5.4 | 1.5.4 |
References
- https://csirt.divd.nl/DIVD-2026-00001/ third-party-advisory