Vulnerability CVE-2023-49955


Published: 2023-12-07   Modified: 2023-12-14

Description:
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."

Type:

CWE-noinfo

Affected software
Dallmann-consulting -> Open charge point protocol 

 References:
https://github.com/dallmann-consulting/OCPP.Core/issues/32

Copyright 2024, cxsecurity.com

 

Back to Top