Skip to content
OpenAdvisories

Product · steve-community

steve

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.7

    In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)

    SteVe is an open-source EV charging station management system. In versions up to and including 3.11.0, when a charger sends a StopTransaction message, SteVe looks up the transaction solely by transactionId (a sequential integer starting from 1) without verify…