Etrel d.o.o. vulnerabilities and threats

Etrel INCH AC charging station management web interface versions prior to 7.1.2 and 8.0.1 contain a hard-coded default credentials vulnerability. This flaw allows remote attackers to gain full Administrator access by authenticating with factory-default credentials over unencrypted HTTP. Exploitation enables unauthorized administrative control, including access to charger configuration, OCPP ChargePoint Identity, and CSMS WebSocket connection details.