Wallbox Pulsar Plus
From Wiki-IoT
Revision as of 16:15, 25 October 2026 by Jeandecian (talk | contribs)
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| Wallbox Pulsar Plus | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Wallbox Pulsar Plus
Brand: Wallbox (Parent: Wallbox Chargers S.L.) Category: EV charger • Model / Gen: Pulsar Plus (PLP1) Pulsar Plus Release Date: 2021-02-01 • Status: In sale Classification Date: 2026-10-25 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | The unit is wall-mounted with a sealed enclosure and no documented debug port. Physical access and removal are possible but not a normal remote path. |
| Known vulnerabilities | Rare | [1] 🔗 Proof | No public CVE was found for Pulsar Plus. Older firmware allowed Bluetooth connection without a PIN; PIN support arrived in software 6.7.17 and is optional on Pulsar Plus, so an unauthenticated local Bluetooth path existed on older units. |
| Prior attacks | None | 🔗 Proof | No documented public field attack or botnet use of this charger was found. The PIN change is a security hardening measure, not evidence of a known campaign. |
| Updatability | Very common | 🔗 Proof | Wallbox publishes frequent charger software releases and supports OTA firmware updates. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | [2] 🔗 Proof | Cloud access uses a myWallbox account and Bluetooth access can require a PIN. The PIN is optional on Pulsar Plus, so authentication is not complete across all local channels. |
| Communications | Encrypted with up-to-date encryption | 🔗 Proof | Recent firmware supports OCPP 1.6j Security Profile Level 2 with central-system root certificates, and Wi-Fi uses standard link-layer encryption. |
| Storage | Encrypted with obselete encryption | 🔗 Proof | Wallbox does not publish details of local configuration and credential encryption, so this is treated as partial rather than proven up-to-date. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Single myWallbox account per charger, with no documented role hierarchy. |
| Authentication | Basic | 🔗 Proof | Account login plus an optional six-digit Bluetooth PIN. Mandatory two-factor authentication is not documented. |
| Brute-force protection | Basic | 🔗 Proof | The PIN is a fixed six-digit value and no Bluetooth-specific failed-attempt lockout is documented, although an attacker must be in radio range. |
| Event logging | Partial logging | 🔗 Proof | Charging sessions and energy history are recorded in the portal, but no administrator-access audit log is documented. |
| Passwords | Require change after setup | 🔗 Proof | The account password is user-set, and firmware 6.11 and later allows the user to change the Bluetooth PIN. No factory default account password is documented. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | Wallbox charger firmware (Companion App: myWallbox app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: • Power: 7.4 kW / 11 kW / 22 kW variants • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: Wi-Fi, Bluetooth, OCPP |
| Physical (Dimensions & Mass) | Dimensions: 166 x 163 x 82 mm (without cable) • Mass: 1 kg (without cable) |
