Skip to content
OpenAdvisories

Vendor

EV2GO

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.4

    EV2GO ev2go.io Missing Authentication for Critical Function

    WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discov…