Brendan Scarvell
Brendan is a security researcher and co-founder of Signal 11, with a background spanning web application, network, hardware, and embedded device security. His work focuses on finding and exploiting vulnerabilities in real-world systems, with a particular interest in connected devices and the security risks created when consumer and business infrastructure overlap.
Session
A full-stack teardown of a commercial EV charger, from default credentials in the installation guide through to unauthenticated control of the AC power contactors.
This research covers multiple pre-auth RCE vulnerabilities including a Bluetooth attack requiring no network access, an unauthenticated manufacturing test mode that bypasses every safety interlock on the charger, and a design flaw that puts all safety mechanisms in a single Linux process with no independent hardware verification.
The affected firmware platform is used by multiple resellers globally. A single broadcast UDP packet can disable ground fault protection across an entire fleet.