What is the severity of CVE-2025-6678?

CVE-2025-6678 has a CVSS v3 score of 0, which is classified as Low severity.

Is there an exploit available for CVE-2025-6678?

No known public exploits are currently available for CVE-2025-6678.

Is there a patch available for CVE-2025-6678?

No official patches have been released yet for CVE-2025-6678. Consider implementing workarounds or mitigations.

CVE-2025-6678 - CVE Details, Severity, and Analysis

CVE-2025-6678 - CVE Details, Severity, and Analysis | Strobes VI

Severity Scores

CVSS v30.0

CVSS v20.0

Priority Score0.0

EPSS Score0.0

None

Exploitation LikelihoodMinimal

0.00%EPSS

Very low probability of exploitation

Monitor and patch as resources allow

0.00%

EPSS

0.0

CVSS

Exploit

Patch

Medium Priority

no patch

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the Pile API. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-26352.

CVSS v3 Breakdown

Attack Vector:-

Attack Complexity:-

Privileges Required:-

User Interaction:-

Scope:-

Confidentiality:-

Integrity:-

Availability:-

Trend Analysis

Neutral

Vulnerable Products

Vendor	Product
Autel	Maxicharger Ac Pro Firmware