# CVE-2026-9398: Besen BS20 EV Charging Station authentication bypass in BLE/WiFi

Source: https://junglewise.ai/threats/cve-2026-9398-besen-bs20-ev-charging-station-authentication-bypass-in-ble-wifi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-24. Updated: 2026-05-26  
License: CC BY 4.0 with a link back

CVE-2026-9398 · Severity: low · CVSS 3.1 · Published 2026-05-24

The Besen BS20 EV Charging Station is a home electric vehicle charger. A security flaw in its communication protocols allows an attacker on the same local network to intercept and replay commands. This could allow an unauthorized person to tamper with charging settings, such as starting or stopping a charge or changing the power levels.

Technologies: [Besen BS20 EV Charging Station](https://junglewise.ai/threats/technologies/bs20-ev-charging-station). Vendors: [Besen](https://junglewise.ai/threats/vendors/besen).

## Quick answers

**Is CVE-2026-9398 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9398 being exploited in the wild.

**How severe is CVE-2026-9398?** Low severity, with a CVSS score of 3.1, published 24 May 2026.

**Which products and versions are affected?** Besen BS20 EV Charging Station up to 20260426.

**Is there a fix for CVE-2026-9398?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-9398 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-9398?** Check whether you run Besen BS20 EV Charging Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Besen BS20 EV Charging Station (up to version 20260426) is vulnerable to an authentication bypass via capture-replay. Commands transmitted between the mobile application and the charger via Bluetooth Low Energy (BLE) or Wi-Fi (UDP) lack encryption and integrity protection. An attacker within local network range can intercept these unencrypted UDP packets and replay or modify them to manipulate charging parameters, including duration, current, and power states. The attack is considered complex as it requires local network proximity and the ability to intercept specific traffic. As of April 2026, the vendor has acknowledged the report and is reviewing the findings.

## Affected products

- Besen BS20 EV Charging Station up to 20260426

## Timeline

- 2026-04-26: disclosed: Vulnerabilities reported to vendor and acknowledged.
- 2026-05-24: advisory: CVE published.

## References

- [https://github.com/carfeii/besen](https://github.com/carfeii/besen)
- [https://vuldb.com/submit/813577](https://vuldb.com/submit/813577)
- [https://vuldb.com/vuln/365379](https://vuldb.com/vuln/365379)
- [https://vuldb.com/vuln/365379/cti](https://vuldb.com/vuln/365379/cti)

## Related threats

- [Besen BS20 EV Charging Station improper authorization in OTA Update Handler](https://junglewise.ai/threats/cve-2026-9397-besen-bs20-ev-charging-station-improper-authorization-in-ota)
- [Besen BS20 EV Charging Station UI spoofing in Firmware Version Check](https://junglewise.ai/threats/cve-2026-9396-besen-bs20-ev-charging-station-ui-spoofing-in-firmware-version)
- [Besen BS20 EV Charging Station cleartext credential exposure in BLE/UDP](https://junglewise.ai/threats/cve-2026-9395-besen-bs20-ev-charging-station-cleartext-credential-exposure-in)
- [Besen BS20 EV Charging Station weak authentication in BLE handler](https://junglewise.ai/threats/cve-2026-9394-besen-bs20-ev-charging-station-weak-authentication-in-ble-handler)