EV2GO ev2go.io

An attacker could impersonate legitimate EV charging stations, hijack user sessions, or redirect traffic to cause widespread charging service outages. Attackers could also modify data sent to backend systems, potentially affecting billing, usage tracking, and fleet management systems that rely on EV2GO data.

Transit agencies, municipal fleets, and private fleet operators that use EV2GO for managing electric vehicle charging and billing. This affects any organization relying on the EV2GO platform for charging station operations, session management, or vehicle charge data integration with backend fleet systems.

An attacker on the network could exploit authentication and data protection flaws in the EV2GO platform to impersonate a charging station without valid credentials, intercept and hijack active user sessions, or inject malicious data into the backend system. This could be done by crafting requests to the EV2GO API or mobile app infrastructure to bypass session validation or station authentication checks.