| Package | Affected versions | Patched versions |
|---|---|---|
| open charge point protocol | < 1.2.0 | 1.2.0 |
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free