| शीर्षक | Besen EV Charging Station BS20 EV Charger Insufficiently Protected Credentials |
|---|
| विवरण | Finding 2: Cleartext Credential Exposure via BLE and UDP in Besen Home EV Charging Station
The Besen Home EV Charging Station exposes user credentials in plaintext over UDP and also BLE. Operations such as password change reveals both old and new passwords in plaintext.
The plaintext password is also observed to be frequently broadcasted via UDP, making them observable to any attacker on the same local network.
Successful exploitation may lead to unauthorized access and control of the device. |
|---|
| स्रोत | ⚠️ https://github.com/carfeii/besen/ |
|---|
| उपयोगकर्ता | carfeii (UID 97470) |
|---|
| सबमिशन | 26/04/2026 06:05 PM (1 महीना पहले) |
|---|
| संयम | 24/05/2026 08:19 AM (28 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 365376 [Besen BS20 EV Charging Station तक 20260426 BLE/UDP सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|