ISO 15118-2 Network and Application Protocol Requirements vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ISO 15118-2 Network and Application Protocol Requirements products: 1 record(s), with severity, exploitation and fixes.

EV Car Chargers 1

Exploited only (KEV) →

CVE-2025-12357 Medium · 6.3 CWE-923 Oct 31, 2025

International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints

By manipulating the Signal Level Attenuation Characterization (SLAC) protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close proximity, via electromagnetic induction.