| ID |
CVE-2026-33014
|
| Sažetak |
EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authorized` back to true, defeating the `stop_transaction()` call condition on PowerOff events. As a result, the transaction can remain open even after a remote stop. Version 2026.02.0 contains a patch. |
| Reference |
|
| CVSS |
| Base: | 5.2 |
| Impact: | 4.2 |
| Exploitability: | 0.9 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| PHYSICAL |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
HIGH |
LOW |
|
| CVSS vektor |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L |
| Zadnje važnije ažuriranje |
31-03-2026 - 13:53 |
| Objavljeno |
26-03-2026 - 17:16 |
