CVE-2026-8988

EUVD-2026-46437
Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12.75%
Affected Products (NVD)
VendorProductVersion
autelmaxicharger_single_charger_firmware
𝑥
≤ 1.03.51
autelmaxicharger_single_charger_firmware
𝑥
≤ 1.03.51
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/