Approved changes feed: RSS · Atom

cpe:2.3:a:hydro-québec:le_circuit_electrique_charging_station_backend:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHydro Québec (15a144f1-58b2-510f-9859-0bfb70aa0f77)
ProductLe Circuit Electrique Charging Station Backend (e255dc0f-a225-5f31-b48a-d0cf065f852e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44383 vulnerable 2026-07-29 00:52:14.309933 Hydro-Québec Le Circuit Electrique charging station backend Insufficient Session Expiration
HIGH (7.5)
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
Published: 2026-07-10T22:11:16.866Z
Updated: 2026-07-13T15:34:23.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42952 vulnerable 2026-07-29 00:52:12.935884 Hydro-Québec Le Circuit Electrique charging station backend Improper Restriction of Excessive Authentication Attempts
HIGH (7.5)
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.
Published: 2026-07-10T22:09:16.884Z
Updated: 2026-07-14T14:34:24.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20744 vulnerable 2026-07-29 00:29:05.818459 Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control
CRITICAL (9.8)
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.
Published: 2026-07-10T22:07:23.971Z
Updated: 2026-07-14T14:34:32.306Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.