Description (CNA)
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hydro-Québec / Le Circuit Electrique charging station backend | affected 0 before June_2026 |
CWE
CWE-613
References
- https://www.hydroquebec.com/nous-joindre/
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-188-01.json
ADP enrichment
No English description supplied.
No references supplied.