ICS Advisory: alpitronic Hypercharger EV Charger

Summary:

The document provides information about a vulnerability in alpitronic's Hypercharger EV charger, a high-power charging station. The vulnerability allows an attacker to access the device as an administrator using default credentials if they are not changed. This could result in an attacker disabling the device, bypassing payment, or accessing payment data. The CVSS v3 and v4 scores for this vulnerability are 8.2 and 8.3, respectively. The affected version of the charger is all versions, and the recommendation is to change the default credentials and ensure the interface is only connected to internal segregated and access-controlled networks.