CVE-2023-49958

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-49958

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49958.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-49958

Published

2023-12-07T00:00:00Z

Modified

2026-07-15T01:48:56.028541946Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49958.json"
}

References

Affected packages

Git / github.com/dallmann-consulting/ocpp.core

Affected ranges

Type

GIT

Repo

https://github.com/dallmann-consulting/ocpp.core

Events

Introduced

Fixed

7d1d59090aa895043b28f0c5b14212c3e69a39cf

Database specific

{
    "source": [
        "DESCRIPTION",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "OCPP.Core"
        },
        {
            "fixed": "1.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.0"
        }
    ],
    "cpe": "cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:*:*:*:*:*:*:*:*"
}

Affected versions

0.*

0.1

V1.*

V1.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-49958.json"