tags:pwn2owncar_hackingstack_overflow
original link: From Pwn2Own Automotive: Taking Over the Autel Maxicharger
newsletter link: exploits.club Weekly Newsletter 36 - Regex Fuzzing, C++ Metadata, Kernel Streaming, And More
Exploits Club Summary:
A short post from ZDI which briefly touches on two vulnerabilities identified in the Autel Maxicharger firmware during Pwn2Own automotive earlier this year. The first bug was a straightforward overflow in BLE message parsing, and the second was a hardcoded backdoor in the WiFi authentication. The post does a bit of patch diffing to show the introduced fixes but doesnât touch on anything related to exploitation.