Computers are embedded in almost everything today, from thermostats to refrigerators and even window blinds, all connected to the internet, making them vulnerable to hacking.
Electric vehicle (EV) chargers are also becoming ubiquitous in our daily lives. Being connected devices, they pose security risks if not adequately designed and maintained. Unfortunately, research indicates that EV charger companies have not effectively protected their systems from potential cyber threats.
One major concern lies in the vehicle-to-charger interfaces, where communication occurs between the EV charger and the vehicle through the charge cable. This communication, while essential for negotiating power levels and charge time, could also serve as a gateway for malware if not properly secured. Researchers found these interfaces often lacked encryption, making them susceptible to data interception and remote attacks with software-defined radios, potentially disrupting charging sessions from a distance.
Additionally, user interfaces of EV chargers are at risk of simple attacks like card skimmers for payment systems, RFID cloning attacks, and vulnerabilities in smartphone apps used for charging networks. Furthermore, the web-based configuration interfaces often found in EV chargers may have weak credentials and be accessible on the internet, providing an easy entry point for hackers.
Compromised EV chargers could lead to minor consequences such as credit card data theft or session interruptions, but in more severe cases, they could disable safety features, risk electrocution, or deliver excessive power to the vehicle, endangering users. Furthermore, a coordinated attack on a large number of chargers could potentially disrupt the power grid, especially as EV chargers demand increasing amounts of power.
As EV adoption rises and technologies like vehicle-to-grid charging become mainstream, the need for robust security measures in EV chargers becomes even more critical. Implementing best practices recommended by organizations like Sandia National Laboratory, such as securing admin ports, verifying firmware updates, and restricting access to web configuration interfaces, can help mitigate these risks and ensure the safety and security of EV charging infrastructure.
Image Source: PattPaulStudio / Shutterstock
