CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-49955
https://notcve.org/view.php?id=CVE-2023-49955
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network." Se descubrió un problema en Dalmann OCPP.Core anterior a 1.2.0 para OCPP (Protocolo de punto de carga abierto) para vehículos eléctricos. No valida la longitud del campo chargePointVendor en un mensaje BootNotification, lo que puede provocar inestabilidad del servidor y denegación de servicio al procesar entradas excesivamente grandes. • https://github.com/dallmann-consulting/OCPP.Core/issues/32 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-49956
https://notcve.org/view.php?id=CVE-2023-49956
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions. Se descubrió un problema en Dalmann OCPP.Core anterior a 1.3.0 para OCPP (Protocolo de punto de carga abierto) para vehículos eléctricos. Un mensaje StopTransaction con cualquier ID de transacción aleatorio finaliza las transacciones activas. • https://github.com/dallmann-consulting/OCPP.Core/issues/34 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-49957
https://notcve.org/view.php?id=CVE-2023-49957
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to the expected ConcurrentTx status. This could result in critical transaction management and billing errors. NOTE: the vendor's perspective is "Imagine you've got two cars in your family and want to charge both in parallel on the same account/token? Why should that be rejected?" • https://github.com/dallmann-consulting/OCPP.Core/issues/35 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-49958
https://notcve.org/view.php?id=CVE-2023-49958
An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity. Se descubrió un problema en Dalmann OCPP.Core hasta 1.2.0 para OCPP (Protocolo de punto de carga abierto) para vehículos eléctricos. • https://github.com/dallmann-consulting/OCPP.Core/issues/36 • CWE-20: Improper Input Validation •