Is ISO 15118 Enough to Secure EV Charging?

October 8, 2025
VicOne
Is ISO 15118 Enough to Secure EV Charging?

The rapid rise of electric vehicles (EVs) is not only transforming mobility but also accelerating the push toward a cleaner, more sustainable future. But this growth also brings new challenges. By 2040, more than 600 million EVs are expected on the world’s roads, a surge that will place unprecedented pressure on electricity grids. 

To help manage this shift, the International Organization for Standardization (ISO) introduced ISO 15118, a standard that enables innovations such as smart charging and vehicle-to-grid (V2G) communication. These features promise to ease grid strain and make EV charging more seamless, secure, and user-friendly. 


Figure 1. Released in 2014, ISO 15118-2 introduced these innovations: smart charging, Plug & Charge, and encrypted communication.

Figure 1. Released in 2014, ISO 15118-2 introduced these innovations: smart charging, Plug & Charge, and encrypted communication.


But is ISO 15118 enough to secure EV charging? 

In the research paper “Securing the Charge: Hidden Risks in ISO 15118”, we explain why securing the charge requires more than mere compliance. The paper highlights how ISO 15118: 

  • Strengthens security by securing communication between EVs and charging stations and shifting sensitive operations to e-Mobility Service Providers (eMSPs) 
  • Resolves long-standing cybersecurity issues while also leaving some risks unaddressed 
  • Still leaves charging stations exposed, making them one of the most vulnerable elements in the ecosystem 
  • Requires a multi-stakeholder approach, from car manufacturers (OEMs) and station manufacturers to grid operators and eMSPs, to build a more secure and more resilient EV charging infrastructure. 

To uncover more insights, download “Securing the Charge: Hidden Risks in ISO 15118”, a research paper authored by Salvatore Gariuolo and Rainer Vosseler of Trend Micro FTR Research, published for VicOne. 


Download VicOne Whitepaper: Securing the Charge: The Hidden Risks in ISO 15118

Our News and Views

Gain Insights Into Automotive Cybersecurity

  • From On-board AI to Physical AI: Why Automotive Cyber Risk Has Entered a New Era
    Blog
    January 30, 2026
    Modern vehicles are now Physical AI systems, where probabilistic decisions control real-world actions and raise new safety and cyber risks. Securing them requires AI-aware threat modeling, lifecycle governance, and continuous assurance to keep systems safe.
    Read More
  • Pwn2Own Automotive 2026 Day 3: New Master of Pwn Announced and Other Highlights
    Blog
    January 26, 2026
    Pwn2Own Automotive 2026 set a new record with 76 unique zero-day vulnerabilities discovered, exposing the rapidly expanding attack surface across SDVs, IVI systems, and EV charging infrastructure. The final day crowned Fuzzware.io as Master of Pwn 2026, with 28 Master of Pwn points.
    Read More
  • Pwn2Own Automotive 2026 Day 2: EV Chargers Hit Full Throttle
    Blog
    January 23, 2026
    Day 2 delivered 29 new zero-days, pushing the total to a record 66. Researchers repeatedly compromised Level 2/3 EV chargers and IVI systems using practical flaws like exposed interfaces and command injection. The takeaway: automotive and charging infrastructure attacks are now repeatable at scale—shifting cyber risk from theoretical to immediate operational impact.
    Read More
  • Pwn2Own Automotive 2026: Uncovering 37 Unique Zero-Days
    Blog
    January 22, 2026
    Pwn2Own Automotive 2026 Day 1 opened with record-breaking momentum, with researchers successfully compromising infotainment systems, EV chargers, and Tesla interfaces—highlighting how expansive today’s automotive attack surface has become. The surge in entries and chained exploits confirms a clear shift: in the SDV era, automotive cyber risk is no longer isolated to the vehicle, but systemic across the entire ecosystem.
    Read More
Visit Our Blog

Accelerate Your Automotive Cybersecurity Journey Today

Contact Us