Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).
CWE-639