This vulnerability is a stack‑based buffer overflow triggered by a crafted NFC card response. An attacker with physical proximity can insert a malicious card and cause the device to execute arbitrary code in its own context. The flaw resides in the NFC card response handling and does not require any prior authentication.

The affected devices are Autel MaxiCharger AC Elite Home electric‑vehicle chargers. No specific firmware or hardware versions are listed, so all current installations should be considered vulnerable until a patch is released.

The CVSS score of 6.8 indicates a moderate severity, and the EPSS score of less than 1% suggests exploitation is currently unlikely. Nevertheless, the vulnerability is listed as not in KEV and is exploitable without credentials, so a physically present attacker with NFC expertise could potentially gain full control of the charger. Because no public workaround is available, securing physical access and disabling NFC is an important mitigative step.