CVE-2023-49955

Published: Dec 7, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."

Affected (1)

Products: Dallmann Consulting: Open Charge Point Protocol

Dallmann Consulting

1 product

Open Charge Point Protocol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dallmann Consulting Open Charge Point Protocol	Before 1.2.0

References (2)

https://github.com/dallmann-consulting/OCPP.Core/issues/32

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://github.com/dallmann-consulting/OCPP.Core/issues/32

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.