Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-12357

International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints

Description

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISO 15118-2 Network and Application Protocol Requirements EV Car Chargers

Default version status: unaffected

  • Part 15118-2 Network and Application Protocol Requirementsaffected

References