In an evaluation device, first and second signal controllers transmit test data for executing normal operation of an operating section to a controller of a meter device. A fuzzing data transmitter transmits fuzzing data being improper data differing from the data for executing the normal operation, to the controller. An output status variation detector detects variation from an output status in the normal operation being a visually recognizable output status in the normal operation when the fuzzing data transmitter transmits the fuzzing data to the controller with the controller normally operating the operating section on the basis of the test data. An evaluator evaluates the vulnerability of the controller on the basis of the variation from the output status in the normal operation detected by the output status variation detector.