CVE-2023-49956 Business logic in n/a
Attackers can terminate active EV charging sessions by sending StopTransaction messages with random IDs, disrupting service and altering transaction data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-49956?
CVE-2023-49956 is a high-severity vulnerability in n/a, published on 7 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions.
Which versions are affected by CVE-2023-49956?
It affects 1 product.
Products include Dallmann-Consulting Open Charge Point Protocol.
How do I fix CVE-2023-49956?
No fix has been published for CVE-2023-49956 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-49956 being exploited?
There is no known exploitation of CVE-2023-49956 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-h494-xfhr-2w3j.