Power jacking your station: In-depth security analysis of electric vehicle charging station management systems

The demand for Electric Vehicles (EVs) has been exponentially increasing, and to achieve sustainable growth, the industry dictated rapid development of supporting infrastructure. This requires building a reliable EV charging ecosystem that serves customer demands while ensuring security Internet-enabled systems connected critical infrastructure against possible cyber attacks. To this end, we devise system lookup collection approach obtain representative sample widely deployed Charging Station Management Systems (EVCSMS). Furthermore, leverage reverse engineering penetration testing techniques perform first-of-a-kind comprehensive vulnerability analysis identified EVCSMS their software/firmware implementations. Indeed, our systematic unveils an array vulnerabilities, which demonstrate insecurity remote Considering feasibility such attacks, discuss attack implications stations (EVCS) users. More importantly, simulate impact practical scenarios power grid, result in service disruption failure grid. Finally, recommend mitigation measures, discoveries raise concerns about lack adequate considerations design EVCS, will motivate vendors take immediate action patch developed systems. communication with concerned parties resulted positive responses from some as Schneider Electric, who acknowledged findings by reserving 12 CVEs, respectively.