XCharge vulnerabilities
We track 3 vulnerabilities in XCharge products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 28, 2026.
Latest XCharge vulnerabilities
- 8.6 High severity
C6: Initialization of a Resource with an Insecure Default
A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the chargin
- 8.6 High severity
C6: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the charging controller’s signal-processing logic allows an attacker with physical access to the charging interface to supply message fields that exceed expected bounds. Because the input is not sufficiently valid
- 9.3 Critical severity
C6: Download of Code Without Integrity Check
A firmware update mechanism in the affected charging controller fails to validate the authenticity of firmware packages delivered through the device's management interface. Because cryptographic signatures are not verified, an attacker with the ability to inte