CVE-2023-49958

7.5 highEPSS 0.6%

High (7.5) in dallmann-consulting open charge point protocol. EPSS 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2023-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dallmann-consulting:open_charge_point_protocol

References

https://github.com/dallmann-consulting/OCPP.Core/issues/36
https://github.com/dallmann-consulting/OCPP.Core/issues/36

Check your stack JSON