An unauthenticated attacker can obtain EV charger energy consumption information of other users.
CWE-639