Remotely controlled EV home chargers – the threats and vulnerabilities

guest · Dec 13, 2018

Remotely controlled EV home chargers – the threats and vulnerabilities
December 13, 2018
https://securelist.com/remotely-controlled-ev-home-chargers-the-threats-and-vulnerabilities/89251/

We are now seeing signs of a possible shift in the field of personal transport.
But there is still a major problem – the lack of charging infrastructure. This may not be as relevant in big cities, but in other places car owners mostly rely on their own home EV chargers, a relatively new class of device that has attracted our attention.

But from our point of view this sort of improvement can make chargers an easy target for a variety of attacks. To prove it we decided to take one of them, ChargePoint Home made by ChargePoint, Inc., and conduct some in-depth security research.

ChargePoint Home supports both Wi-Fi and Bluetooth wireless technologies. The end user can remotely control the charging process with a mobile application available for both iOS and Android platforms [...]
We can see two major capabilities an intruder can gain from a successful attack. They will be able to:
• Adjust the maximum current that can be consumed during charging. [...] Stop a car’s charging process at any time, for example, restricting an EV owner’s ability to drive where they need to [...]
Click to expand...

"ChargePoint Home security research" (PDF): https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/12/13084354/ChargePoint-Home-security-research_final.pdf

guest · Aug 1, 2021

Security Flaws in Car Chargers Allow Malicious Actors to Infiltrate Homes
August 1, 2021
https://www.autoevolution.com/news/...icious-actors-to-infiltrate-homes-166380.html

This is exactly the problem with a series of car chargers that are already on the market, according to research conducted by the security experts at Pen Test Partners.
In a whitepaper published recently, the experts inspected the security systems of several car charger brands, trying to figure out if bad actors can breach them and eventually obtain remote access.

Two brands, namely Wallbox and Project EV, proved to be the most vulnerable, with the researchers discovering that in some cases, a more sophisticated attack would have allowed a hacker to access the Wi-Fi network and then eventually monitor traffic or even break into other devices.
In other words, a malicious actor would have been capable of taking control of a car charger and then infiltrate your home by hacking the rest of the network the device was connected to.
Click to expand...

The study shows that millions of smart EV chargers were vulnerable, and one brand used no authorization at all, which means a hacker would have needed only a couple of seconds to access a certain device remotely. The same brand used no firmware signing, so a malicious actor would have been able to send crafted software to pave the way for other attacks through the same network.
Click to expand...

Pen Test Partners: Smart car chargers. Plug-n-play for hackers?

Over the last 18 months, we’ve been investigating the security of smart electric vehicle chargers. These allow the owner to remotely monitor and manage the charge state, speed and timing of their car charger, among many functions. We bought 6 different brands of chargers and also reviewed security of some public charging networks.

The mobile apps all communicate with the charger via an API and cloud-based platform, with the chargers usually connected to the users home Wi-Fi network.
All API and hardware vulnerabilities were successfully disclosed to the vendors involved. All API flaws were remediated, though one vendor only responded and took action once we had involved a trusted journalist.
Click to expand...

Log in or Sign up

Remotely controlled EV home chargers – the threats and vulnerabilities

guest Guest

guest Guest

Log in or Sign up

Remotely controlled EV home chargers – the threats and vulnerabilities

guest Guest

guest Guest

Useful Searches