Description
A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | OpenV2G | < V0.9.6 | V0.9.6 |
Advisories 4
- ICSA-25-044-08 Siemens OpenV2G CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-647005 SSA-647005: Memory Corruption Vulnerability in OpenV2G Siemens ProductCERT · Feb 11, 2025