CVE-2026-44104 — ControllerAgent does not perform validation of firmware
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthen…
Published: 2026-07-30 · CVSS: 9.3 · CVSS 4.0
The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7