An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

An unauthenticated attacker can obtain EV charger energy consumption information of other users.

An unauthenticated attacker can obtain other users' charger information.

Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

Unauthenticated attackers can query an API endpoint and get device details.

An attacker can get information about the groups of the smart home devices for arbitrary users (i.e., "rooms").

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes").

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").