Vulnerabilidades en EVerest
33 resultadosAnálisis Vexday
EVerest apresenta 33 vulnerabilidades catalogadas, com apenas 1 classificada como crítica, mas sem evidências de exploração ativa no campo. A fraqueza dominante (CWE-362, Concurrent Execution using Shared Resource) sugere problemas de sincronização em código, típicos de sistemas de gerenciamento de carregamento elétrico. Ausência de publicações recentes indica que o risco atual é estável, embora o volume de falhas de concorrência mereça atenção em avaliações de integração.
CVE-2026-23955MEDIUMEVerest vulnerable to concatenation of strings literal and integersEPSS 0.2%CVE-2025-59399LOWlibocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.EPSS 0.2%CVE-2025-68138MEDIUMEVerest affected by memory exhaustion in libocppEPSS 0.2%CVE-2025-68134HIGHEVerest's use of assert functions can potentially lead to denial of serviceEPSS 0.2%CVE-2025-68139MEDIUMIn EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingEPSS 0.1%CVE-2026-26074HIGHEVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data raceEPSS 0.1%CVE-2026-22593HIGHEVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsingEPSS 0.1%CVE-2026-26072MEDIUMEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapEPSS 0.1%CVE-2025-68140MEDIUMEVerest allows null session ID to bypass session ID verificationEPSS 0.1%CVE-2026-27814MEDIUMEVerest EvseManager phase-switch path has unsynchronized shared-state access race conditionEPSS 0.1%CVE-2026-26071MEDIUMEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeEPSS 0.1%CVE-2026-27813MEDIUMEVerest has use-after-free in auth timeout timer via race conditionEPSS 0.1%CVE-2026-26070MEDIUMEVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point CrashEPSS 0.1%