| शीर्षक | Besen EV Charging Station BS20 EV Charger Improper Verification of Cryptographic Signature |
|---|
| विवरण | Finding 3: Firmware Version Check Manipulation and UI Spoofing
The mobile app does not validate firmware version responses during update checks. There is no signature checks, though the mobile app reflects that check to be being done.
An attacker can intercept and modify this response to display an arbitrary “newer” version, enabling the upgrade button even when the device is up to date.
This allows UI spoofing and misleading update prompts.
|
|---|
| स्रोत | ⚠️ https://github.com/carfeii/besen |
|---|
| उपयोगकर्ता | carfeii (UID 97470) |
|---|
| सबमिशन | 26/04/2026 06:12 PM (1 महीना पहले) |
|---|
| संयम | 24/05/2026 08:19 AM (28 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 365377 [Besen BS20 EV Charging Station तक 20260426 Firmware Version Check अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|