Vendor
ePower
4 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.4
ePower epower.ie Missing Authentication for Critical Function
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discov…