This vulnerability affects the Besen BS20 EV Charging Station's BLE/WiFi component, enabling an attacker within the local network to perform an authentication bypass through a capture-replay attack. The attack complexity is high, and the exploitability is difficult. The vendor has been notified and is currently reviewing the vulnerability. No patch or remediation level has been published to date.

Successful exploitation could allow an attacker on the local network to bypass authentication mechanisms of the charging station, potentially leading to unauthorized access or control. However, the low CVSS score (2.3) and high attack complexity indicate limited impact and difficulty in exploitation. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, monitoring vendor communications for updates is recommended. Given the attack requires local network access and is complex, limiting physical and network access to trusted users may reduce risk until a patch is available.