Description
A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | OpenV2G | V0.9.4 | — |
Advisories 2
- ICSA-22-132-15 Siemens OpenV2G CISA ICS & IT advisories · May 6, 2025
- SSA-736385 SSA-736385: Memory Corruption Vulnerability in OpenV2G Siemens ProductCERT · May 10, 2022