CVE-2023-49958

Published: Dec 7, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.

Affected (1)

Products: Dallmann Consulting: Open Charge Point Protocol

Dallmann Consulting

1 product

Open Charge Point Protocol

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dallmann Consulting Open Charge Point Protocol	Up to 1.2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://github.com/dallmann-consulting/OCPP.Core/issues/36

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://github.com/dallmann-consulting/OCPP.Core/issues/36

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.