Skip to content
OpenAdvisories

Vendor

steve-community

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.7

    In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)

    SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId (a sequential integer starting from 1) without verify…