Detailing the Attack Surfaces of the WolfBox E40 EV Charger

Trend Micro ZDI provides a hardware teardown of the WolfBox E40 EV charger and notes that its companion mobile app supports pairing with a wide range of devices—potentially expanding attack surface—though no vulnerability research was performed. The report lists notable components (e.g., GD32F307VET6 MCU, Tuya CBU-IPEX WiFi/BLE module, AT24C04 EEPROM, Winbond 25Q64 flash) and describes board features such as relays, current transformers, a low-current power supply, a 1.0F supercapacitor, an undocumented DIP switch, and connections including the CP line.