Podatność CVE-2023-49955
Publikacja: 2023-12-07   Modyfikacja: 2023-12-14

Opis:
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."

Typ:

CWE-noinfo

Affected software
Dallmann-consulting -> Open charge point protocol 

 Referencje:
https://github.com/dallmann-consulting/OCPP.Core/issues/32
Copyright 2024, cxsecurity.com

 

Back to Top