BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//HTVWLE
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-TT8EEA@cfp.romhack.io
DTSTART;TZID=CET:20261003T123000
DTEND;TZID=CET:20261003T131000
DESCRIPTION:Talk summary: Electric vehicle charging infrastructure is rapi
 dly expanding\, becoming a critical component of modern transportation. De
 spite the increased attention on its security\, our research shows that ev
 en devices previously examined in competitions such as Pwn2Own can still h
 ide impactful vulnerabilities.\n\nWe picked up this device right after Pwn
 2Own results were announced and the competition was over - and quickly fou
 nd that the story was far from finished. Our security analysis of this com
 mercially available Phoenix Contact CHARX SEC-3000 EV charging station con
 troller uncovered serious\, previously unknown issues that had gone unnoti
 ced during the event. By combining firmware analysis with emulation techni
 ques\, we identified several critical vulnerabilities (including OS Inject
 ion) affecting the device. We will walk through the approaches\, challenge
 s\, and what we have learned.\n\nLonger talk description: This session pro
 vides a technical analysis into our ongoing research on an EV charging sta
 tion controller. The device we investigated had already been part of a Pwn
 2Own competition\, yet our analysis revealed multiple security vulnerabili
 ties. We will cover our approach to analyzing the charger\, including firm
 ware extraction and emulation to understand internal components and logic 
 of the device ecosystem.
DTSTAMP:20260921T190657Z
LOCATION:STAGE 1 (Section 9)
SUMMARY:Breaking the Charge: Security Analysis of the Phoenix Contact CHARX
  SEC-3000 EV Charging Controller - Piotr Ptaszek\, Matthew
URL:https://cfp.romhack.io/romhack-camp-2026/talk/TT8EEA/
END:VEVENT
END:VCALENDAR
