CVE-2025-55705CWE-613

EVMAPA Insufficient Session Expiration

High · published January 22, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

⚡ A crafty connection could flip your charging station into a free-for-all! Multiple simultaneous sessions using the same station ID make your system vulnerable to manipulation! 😱 Think of it as a restaurant where one table can order food multiple times based on a single reservation — chaos ensues when the kitchen gets overloaded with duplicate orders, leading to confusion and mistakes. Similarly, unauthorized access and data inconsistency arise when attackers exploit this vulnerability in your charging sessions. An attacker could potentially take control of multiple charging sessions, leading to unauthorized access and manipulation of user data. This could result in cost surges, incorrect billing, or even the disruption of service for legitimate users. The consequences could be absolutely devastating for both users and service providers!

Put simply

Think of it as a restaurant where one table can order food multiple times based on a single reservation — chaos ensues when the kitchen gets overloaded with duplicate orders, leading to confusion and mistakes. Similarly, unauthorized access and data inconsistency arise when attackers exploit this vulnerability in your charging sessions. This vulnerability arises from inadequate session management, allowing the reuse of valid charging station IDs across multiple simultaneous connections. As a result, attackers can establish unauthorized sessions and manipulate charging interactions without proper oversight.

What to do

An attacker could potentially take control of multiple charging sessions, leading to unauthorized access and manipulation of user data. This could result in cost surges, incorrect billing, or even the disruption of service for legitimate users. The consequences could be absolutely devastating for both users and service providers! Implement proper session management controls and session expiration policies to prevent multiple connections from using the same charging station ID. Regularly audit session logs for unusual activity and deploy updates to ensure compliance with best security practices. You've got this! With these steps, you'll secure your charging stations and protect user data in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2026-01-22T22:32Z
EPSS history
Timeline
  • 22 JAN 22:32Z
    EVMAPA Insufficient Session Expiration
    cvelistv5