CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-49958

An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.8%

CVSS Severity

CVSS v3 Score 7.5

References

https://github.com/dallmann-consulting/OCPP.Core/issues/36
https://github.com/dallmann-consulting/OCPP.Core/issues/36

Products affected by CVE-2023-49958

Dallmann-Consulting » Open Charge Point Protocol » Version: 0.1

cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:0.1
Dallmann-Consulting » Open Charge Point Protocol » Version: 1.1.0

cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:1.1.0
Dallmann-Consulting » Open Charge Point Protocol » Version: 1.2.0

cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:1.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-49958

Products

Pricing

Contact Us