everest-core.

EVerest has RemoteStop Bypass via BCB Toggle Session Restart

• everest-core
• Broken access control

EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

• everest-core
• Broken access control

EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio

• everest-core
• Race condition

EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted

• everest-core
• Broken access control

EVerest: ISO15118 session_setup use-after-free can crash EVSE process

• everest-core
• Memory corruption

EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state

• everest-core
• Memory corruption

EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state

• everest-core
• Memory corruption

EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition

• everest-core
• Race condition

EVerest has use-after-free in auth timeout timer via race condition

• everest-core
• Memory corruption

EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race

• everest-core
• Race condition

EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue

• everest-core
• Memory corruption

EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map

• everest-core
• Race condition

EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free

• everest-core
• Race condition
• Memory corruption

EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash

• everest-core
• Race condition

EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes

• everest-core
• Memory corruption

EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ

• everest-core
• Memory corruption

EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload

• everest-core
• Memory corruption

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

• everest-core
• CWE-193

EvseV2G has sequence state validation bypass

• everest-core
• Authentication bypass
• Broken access control

EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

• everest-core
• Memory corruption

EVerest allows null session ID to bypass session ID verification

• everest-core
• Broken access control

In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing

• everest-core
• Authentication bypass

EVerest affected by memory exhaustion in libocpp

• everest-core
• Denial of service

EVerest vulnerable to concatenation of strings literal and integers

• everest-core
• CWE-1046

EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

• everest-core
• Memory corruption
• Denial of service

EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service

• everest-core
• Denial of service

EVerest's inadequate exception handling leads to denial of service

• everest-core
• CWE-703

EVerest's use of assert functions can potentially lead to denial of service

• everest-core
• CWE-20

EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver

• everest-core
• Memory corruption

EVerest's unlimited connections can lead to DoS through operating system resource exhaustion

• everest-core
• Denial of service

EVerest has an integer overflow in the "v2g_incoming_v2gtp" function

• everest-core
• Memory corruption