What’s Vulnerable › Vulnerabilities

CVE-2023-49958

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-07 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.

Affected products

• Dallmann-Consulting Open Charge Point Protocol: through 1.2.0

References

• https://github.com/dallmann-consulting/OCPP.Core/issues/36
• https://github.com/dallmann-consulting/OCPP.Core/issues/36

Get alerted when CVE-2023-49958 or the next vulnerability affects your stack