Open Charge Point Protocol
Approved changes feed: RSS · Atom
cpe:2.3:a:dallmann-consulting:open_charge_point_protocol:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Dallmann Consulting (5d15824e-e8f4-527b-93e8-127f56de82e8) |
|---|---|
| Product | Open Charge Point Protocol (9f960e4c-1310-5966-906a-7f2a59bdacd9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dallmann-consulting/ocpp.core |
purl2cpe | 2026-06-01 10:15:27.852012 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49958 |
vulnerable | 2026-06-08 06:16:10.831186 |
Details available
An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-10-09T14:58:11.750Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49957 |
vulnerable | 2026-06-08 06:16:10.830667 |
Details available
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to the expected ConcurrentTx status. This could result in critical transaction management and billing errors. NOTE: the vendor's perspective is "Imagine you've got two cars in your family and want to charge both in parallel on the same account/token? Why should that be rejected?"
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T22:09:48.805Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49956 |
vulnerable | 2026-06-08 06:16:10.830380 |
Details available
An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T22:09:49.529Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49955 |
vulnerable | 2026-06-08 06:16:10.829871 |
Details available
An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network."
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T22:09:49.421Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.