PT-2026-1664 · Efacec · Efacec Ev Chargers

CVE-2026-22540 · Published 2026-01-07 · Updated 2026-01-07

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions EFACEC EV chargers (affected versions not specified)

Description A large number of ARP requests can cause a denial of service on a control board within the EV charger, impacting the EV interfaces. The affected board's proper operation is essential for the charger's functionality. This disruption allows control of the EV interfaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-22540

Affected Products

Efacec Ev Chargers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-22540 · Security Note
• https://twitter.com/CVEnew/status/2008914170763440605 · Twitter Post
• https://t.me/CVEtracker/41612 · Telegram Post
• https://cds.thalesgroup.com/en · Note
• https://twitter.com/0dayPublishing/status/2008907965848285426 · Twitter Post