CVE-2023-49955

An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles

published December 7, 2023

CVSS
—
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00707 · 52.9th percentile
Published
2023-12-07T00:00Z
EPSS history
Timeline
  • 07 DEC 00:00Z
    An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles
    cvelistv5