Paper/Archive/CVE-2026-22540

CVE-2026-22540

EFACEC QC60/90/120 — DENIAL OF SERVICE VIA ARP PACKETS

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 31.0.310 × 206.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

Affected

ProductAffectedFixed inSource

QC60/90/1208–CNA

Scores by source

S21sec (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcds.thalesgroup.com/en