Описание
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:steve-community:steve:3.7.1:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 5.9
github
10 месяцев назад
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.
EPSS
Процентиль: 19%
0.00061
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-287