Discussion
Haha. CCS2 electrical vehicle chargers communicate by running powerline commnication (yes, a full IP networking stack) over the wires plugged in your vehicle. And yes, some charging stations have a ssh listening, with default credentials (root/root).
https://www.saiflow.com/blog/the-hidden-ccs2-attack-surface-on-ev-chargers
(thanks @faheus for pointing me to it)
@vogelchr@chaos.social @faheus@chaos.social this is so insane. How do they make so many critical mistakes when setting up something like this?
@syphist @faheus what I find particularly funny when reading the report: username/password is root/root. Also there’s no rate limit… 🤡 - well, seriously, this should be the first thing to try when being bored.
Also, I feel slightly tempted to bodge a second power line modem into my cars charge port - for when I’m bored while topping up the battery… or maybe my car uses the Ethernet interface of these popular chipsets? Then maybe splice in an Ethernet switch?
@vogelchr@chaos.social @faheus@chaos.social ikr, even just setting a different password unique to the company would've made the low hanging fruit still on the tree. It's insane how bad these companies implement these things
@syphist @faheus I would have expected some kind of fleet management: bring the charger up initially, maybe login with root/root for gods sake, but then make it have some dance with a central entity, configures keys/passwords/whatnot … ✅ - I mean these chargers have to be integrated somewhere for billing and monitoring anyway…
Also, if you’re basically a IPv6 router, and connected to company VPN and whatnot: use fsking nftables… 🤦♂️
Install bonfire.cafe
Get the full app experience
@vogelchr @faheus I think this article was quoted a few times last year: https://arxiv.org/html/2404.06635v2
Current Affairs: A Security Measurement Study of CCS EV Charging Deployments