Vulnerability Details CVE-2023-49955
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.7%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-49955
-
cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:0.1
-
cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:1.1.0