Threats tagged 'ghsa-8c4p-92q7-6q8x'

A critical vulnerability exists in certain WebSocket endpoints used for OCPP (Open Charge Point Protocol) communications. These endpoints lack proper authentication, allowing unauthenticated attackers to impersonate charging stations by connecting with known or discovered station identifiers. This unauthorized access enables attackers to issue or receive OCPP commands as if they were legitimate chargers, potentially leading to privilege escalation, unauthorized control of charging infrastructure, and corruption of charging network data reported to the backend.