An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."
References
| Link | Resource |
|---|---|
| https://github.com/dallmann-consulting/OCPP.Core/issues/32 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
13 Dec 2023, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () https://github.com/dallmann-consulting/OCPP.Core/issues/32 - Exploit, Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
07 Dec 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-07 13:15
Updated : 2024-02-05 00:22
NVD link : CVE-2023-49955
Mitre link : CVE-2023-49955
CVE.ORG link : CVE-2023-49955
JSON object : View
Products Affected
dallmann-consulting
- open_charge_point_protocol
CWE