The vulnerability permits public discovery of charging station authentication identifiers through web-based mapping services. An attacker can read these identifiers without authenticating, exposing the credentials used by the charging infrastructure. The affected weakness is an insufficiently protected credential state (CWE-522).

Mobiliti e-mobi.hu charging station platforms are affected. The CNA lists the product but does not specify version details; all current models appear to be impacted as they expose authentication identifiers via their web mapping interfaces.

The CVSS score of 6.9 indicates moderate severity. The EPSS score of less than 1% suggests a very low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Attackers are inferred to exploit the flaw remotely via the public web interface, requiring no initial credentials. Successful exploitation can lead to leakage of sensitive authentication data and potentially compromise the integrity of the charging service. No known public exploits have been reported, but the exposure warrants attention.