CVE-2023-49955

Summary

CVE-2023-49955 is a vulnerability affecting Dalmann OCPP.Core versions prior to 1.2.0. This issue pertains to the Open Charge Point Protocol for electric vehicles, where the software fails to validate the length of the chargePointVendor field in BootNotification messages. An attacker could exploit this flaw by sending excessively large inputs, potentially leading to server instability and a denial of service. It is important to note that the vendor advises using OCPP.Core in a secure environment or network.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.