Detailing the Attack Surfaces of the Tesla Wall Connector EV Charger

This report documents reverse engineering of an embedded system’s STM32 MCU and a communications module, describing a hardware method to hold the CPU in reset for safe access, the MCU firmware split between bootloader and application, and a detailed flash layout of the comms module (secure boot header, partition tables, configuration, dual firmware partitions, and LittleFS logs). It notes code-signing support, sparse strings suggesting RTOS threads (e.g., Wi-Fi and CAN handlers), and infers role separation where the MCU handles CAN/metering/LEDs while the communications module manages network functions.