A security vulnerability has been detected in Besen BS20 EV Charging Station up to 20260426. This affects an unknown part of the component BLE/WiFi. Such manipulation leads to authentication bypass by capture-replay. The attack must be carried out from within the local network. A...
Vendor
besen vulnerabilities
5 published CVES affecting besen, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 1
- High
- 0
- Medium
- 2
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Products
Latest besen CVEs
Newest publication first
-
LowCVSS 2.3 EPSS 0.29%
-
CVE-2026-9397 Besen BS20 EV Charging Station OTA Update Installation improper authorization
PublishedCriticalCVSS 9.2 EPSS 0.45%A weakness has been identified in Besen BS20 EV Charging Station up to 20260426. Affected by this issue is some unknown functionality of the component OTA Update Installation Handler. This manipulation causes improper authorization. The attack is possible to be carried out remote...
-
MediumCVSS 6.3 EPSS 0.27%
A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be exec...
-
MediumCVSS 5.1 EPSS 0.16%
A vulnerability was identified in Besen BS20 EV Charging Station up to 20260426. Affected is an unknown function of the component BLE/UDP. The manipulation leads to insufficiently protected credentials. The attack needs to be initiated within the local network. The original discl...
-
LowCVSS 2.3 EPSS 0.19%
A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. This impacts an unknown function of the component Bluetooth Low Energy Handler. Executing a manipulation can lead to weak password requirements. The attack needs to be done within the local network....
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.