Zero Day Initiative | Blog
Follow
Detailing the Attack Surfaces of the WolfBox E40 EV Charger
The WolfBox E40 is a Level 2 electric vehicle charge station designed for residential use, featuring a minimal user interface and an NFC reader for user authentication. The device uses a mobile application for installation and operation. The firmware for the GigaDevice MCU and the communications module was extracted, showing the use of uC/OS II and mBedTLS version 2.16.4. The communications module firmware appears to be partitioned with encrypted sections. The device exposes a single Bluetooth LE service with three characteristics, and it connects to various AWS IP addresses for updates and communication. The device keeps TCP port 6668 open for local Wi-Fi connections, and it uses a Tuya-specific protocol for encrypted local communications. The device's attack surfaces include the mobile application, the Bluetooth LE interface, and the network traffic.