DEF CON 3 3 - Exploiting Vulns in EV Charging Comms - Jan Berens, Marcell Szakály, Sebastian Köhler

In this talk we present a collection of attacks against the most widely used EV charging protocol, by exploiting flaws in the underlying power-line communication technologies affecting almost all EVs and chargers. Specifically, we target the QCA 7000 Homeplug modem series, used by the two most popular EV charging systems, CCS and NACS. We demonstrate multiple new vulnerabilities in the modems, enabling persistent denial of service. To better understand the scope of these issues, we conduct a study of EV chargers and vehicles, and show widespread insecurities in existing deployments. We show a variety of practical real-world scenarios where the HomePlug link can be used to hijack EV charging communications, even at a distance. Finally, we present results from reverse engineering the firmware and how we can gain code execution.