CVE-2026-44104
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install modified firmware, leading to full system compromise.
Risk Assessment
The risk is full compromise of the charging controller by an unauthenticated remote attacker.
Recommendation
Implement cryptographic signature verification for firmware updates to prevent installation of unauthorized versions.
Original NVD description (English source)
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.