🕵️ RESEARCH & DEEP DIVES
- XCharge EV Chargers Expose SSH with Default Root Credentials
XCharge EV chargers allow root access via SSH over the CCS2 charging port using default credentials.- Applies to XCharge C6 EV chargers and potentially other vendors with similar configurations
- Charging port acts as a network interface exposing SSH and Telnet services on all interfaces
- Default root:root credentials with no authentication hardening enable immediate privileged access
- Attack requires physical connection via CCS2 plug and low-cost hardware to exploit powerline communication
- Compromise allows energy theft, charger manipulation, backdoors, lateral movement to CPO networks, and safety risks
📎 Coverage: saiflow.com · 👁 via @campuscodi@mastodon.social