One Modem to Brick Them All - Vulnerabilities in EV Charging Communications

Explore critical vulnerabilities in electric vehicle charging infrastructure through this 43-minute DEF CON 33 conference talk that exposes widespread security flaws in EV charging protocols. Discover how attackers can exploit weaknesses in QCA 7000 Homeplug modem series used by CCS and NACS charging systems, affecting nearly all electric vehicles and charging stations. Learn about multiple newly identified vulnerabilities that enable persistent denial of service attacks against EV charging communications. Examine the results of a comprehensive study revealing insecurities in existing EV charger and vehicle deployments across the industry. Understand practical attack scenarios where HomePlug power-line communication links can be hijacked remotely to disrupt charging operations. Gain insights into firmware reverse engineering techniques and methods for achieving code execution on these critical infrastructure components. Analyze the security implications of power-line communication technologies that form the backbone of modern EV charging networks and their potential impact on electric vehicle adoption and infrastructure reliability.