The Patching Friars' AlmanacA calendar of CVE saints

February 7

BrokenwireHoly card for brokenwire, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Brokenwire FILUM SINE TACTU
🤖 Image and text generated with AI

⬇ Download holy card: ·

⚔ Commemorated today: The Scourge of Mafiaboy (2000)

Embed on your site

Saint Brokenwire, Who Pulled the Plug From Afar

Patron of rapid chargers, electric cars in the queue, and radios that cause interference.

Life

In February 2022 researchers from the University of Oxford and armasuisse showed that the Combined Charging System, the standard for DC rapid charging, talks to the car over the cable using power-line communication that is sensitive to radio interference. With a software-defined radio and little power, even from tens of metres away, charging sessions of several vehicles at once could be cut off. Closing the hole means changing the protocol; an update is not enough.

Prayer

O Saint Brokenwire, who drops the line without touching the cable, grant our cars a full charge and a short queue. Amen.

How to celebrate

Celebrated by following the standard's evolution and, meanwhile, plugging the cable back in with Franciscan patience.

A wire you never touch can still be broken.

Technical record

Disclosed on
February 7 2022
CVE
CVE-2022-0878
CVSS
4.6
Product
Combined Charging System · Combined Charging System

Electric Vehicle (EV) commonly utilises the Combined Charging System (CCS) for DC rapid charging. To exchange important messages such as the State of Charge (SoC) with the Electric Vehicle Supply Equipment (EVSE) CCS uses a high-bandwidth IP link provided by the HomePlug Green PHY (HPGP) power-line communication (PLC) technology. The attack interrupts necessary control communication between the vehicle and charger, causing charging sessions to abort. The attack can be conducted wirelessly from a distance using electromagnetic interference, allowing individual vehicles or entire fleets to be disrupted simultaneously. In addition, the attack can be mounted with off-the-shelf radio hardware and minimal technical knowledge. With a power budget of 1 W, the attack is successful from around 47 m distance. The exploited behavior is a required part of the HomePlug Green PHY, DIN 70121 & ISO 15118 standards and all known implementations exhibit it. In addition to electric cars, Brokenwire affects electric ships, airplanes and heavy duty vehicles utilising these standards.

Sources: brokenwire.fail

Commemorated today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.