Weak IoT security could make EV chargers vulnerable to mass shutdowns

Researchers found weak authentication and predictable device IDs in rentable IoT systems that could enable remote attacks at scale.

A Tsinghua University researcher showed a flaw in a Chinese EV charging app could be used to remotely disable charging ports.

Related research across shared scooters, European bike apps, and other rentable devices found widespread backend and authorization gaps.

The findings, presented at Black Hat Asia and USENIX Security 2024, raise concerns about disruption to charging infrastructure and shared mobility services.