Zero Day Initiative - Reviewing the Attack Surface of the Autel MaxiCharger: Part Two
Briefly

from Zero Day Initiative1 month ago
The Autel MaxiCharger presents a vast attack surface for potential security vulnerabilities, largely due to its extensive feature set in both mobile applications.
Zero Day Initiativehttps://www.thezdi.com/blog/2025/1/15/reviewing-the-attack-surface-of-the-autel-maxicharger-part-two
Upon reverse engineering, we found that the Autel Charge app employs anti-reversing measures, indicating a heightened focus on security for user interactions.
Zero Day Initiativehttps://www.thezdi.com/blog/2025/1/15/reviewing-the-attack-surface-of-the-autel-maxicharger-part-two
The Autel Config app is distinctly separate from the Charge app, suggesting that authorized personnel have a different access path, hinting at strict user management.
Zero Day Initiativehttps://www.thezdi.com/blog/2025/1/15/reviewing-the-attack-surface-of-the-autel-maxicharger-part-two
The functionality of the Autel Charge app includes compelling features like charging schedules and firmware updates, but the unexpected superuser request poses potential risks.
Zero Day Initiativehttps://www.thezdi.com/blog/2025/1/15/reviewing-the-attack-surface-of-the-autel-maxicharger-part-two
Read at Zero Day Initiative
#autel-maxicharger #vulnerability-research #mobile-applications #security-analysis #reverse-engineering
[
|
]