Reviewing the Attack Surface o... Note

Reviewing the Attack Surface of the Autel MaxiCharger: Part One

The Autel MaxiCharger AC Wallbox Commercial has been selected for the Pwn2Own Automotive contest, and internal photos of the main boards are provided to aid in vulnerability research. The charger's metrology board is responsible for power monitoring and providing power to the charging cable. The power board features an STM32F407ZGT6 microcontroller, which can be accessed through broken-out pins, including UART and SWD pins. The main board handles Bluetooth, Wi-Fi, and ethernet communications and contains a Barrot BR8041A01 Bluetooth module and an ESP32 WROOM 32D module. The main processor is a GD32F407ZGT6 ARM Cortex-M4 microcontroller, which has readout protection level 1 configured. The charger also features a 4G mobile communications board with a Quectel EC25AFXDGA module and a SIM card tray. The 4G module can be accessed through a micro USB port and UART connection. The charger also has an NFC and LED board with a Fudan Microelectronics FM17660 multi-protocol contactless transceiver IC. The internal components of the MaxiCharger are similar to those found in the previous model, making it easier for researchers to build upon existing knowledge. The blog post aims to provide a starting point for vulnerability research on the Autel MaxiCharger.
CdXz5zHNQW_KQjVoobZUR.jpeg