Ford Charge Station Pro open ports

[cjueden]

I've recently installed the Ford Charge Station Pro . So far so good on it's use. WiFi can be spoty like I've read. While looking into seeing if there was any way to integrate it with Home Assistant I noticed I haven't found any info on anyone's experiences running nmap on it. So I did and found these ports to be open
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https

I've been unsuccessful with ssh trying the usual root/admin combos and the creds that are on the EVSE itself didn't work either.
80 and 443 take me to an nonfunctional login page

Has anyone had any luck or found more info on these or other ports that are exposed on this?

Sponsored

 

[K6CCC]

Had not thought about trying that - so I did.

Scanned all 64K ports and got the exact same results that you did.

 

[sfringer]

I have RunZero doing passive device discovery/monitoring on my network and it indicates the following:

- TCP/22 appears to be running SSH-2.0-OpenSSH_7.7
- TCP/80 returns 301 Moved Permanently (looks to be running nginix as the server)
- TCP/443 returns 500 Internal Server Error
- RunZero flags the TLS certificate for the device is expired:

• Issued: Nov 01, 2019
• Expires: Oct 30, 2024

- UDP/23 for NTP running ntpd 4.2.8p13
- UDP/5353 for MDNS services

 

[chl]

Maybe try calling a Ford software tech or try Siemens help line and keep trying to get to some one with knowledge of the software - may take a few tries, or many.

Another avenue might be the HIS documentation or a knowledgeable installer. Although I believe a lot of the communication is on wire RS485 signalling some set up is done via an app.

Also check this thread: https://www.f150lightningforum.com/...e-station-pro-data-for-home-automation.14163/

Home Assistant has a HACS Ford Pass integration. There is also a great thread on the Mach E forum for Home Assistant.

https://www.macheforum.com/site/threads/home-assistant-automations-show-them-off.19273/

 

[cjueden]

Good afternoon all. Both the Ford Charge Station Pro and Ford Connected Charge Station are indeed OCPP compliant. We hope this clears up any uncertainty. Thank you for your questions, patience, and understanding as it helps us improve as an organization.

I've found this replay by @Ford Motor Company in a different thread confirming that the FCSP is OCPP compliant but haven't been able to find a setting to change which OCPP server the FCSP is pointing to.

I read on the forum here somewhere that I can't find right now. That the FordPass App just loads a website off the FCSP. I've tried to get the user-agent with no luck using wireshark in hopes that the FCSP is looking for a custom user-agent or other info before returning the webpage that it may be returning to the FordPass App. In the hopes that I could spoof this info and access the FCSP with a web browser.


I was only able to ever see mDNS requests using a wireless connection for convenience but read online that this may be a symptom of not seeing full picture of all the traffic on the network and can try a wired connection later. Another suspicion that the FCSP is serving up a local webpage is I can only access the FCSP on the same network NOT from the IOT network that I have setup that is would be "below" the network that the FCSP is on.

I've also found the model name VersiCharge SG in the head tag of the webpage served on 443

Sponsored