OpenV2G 安全漏洞

The primary scope of the OpenV2G project is to provide an open source implementation of the latest draft of the ISO/IEC Vehicle-to-Grid Communication Interface V2G CI standard.A memory corruption vulnerability exists in Siemens OpenV2G due to a missing length check in the OpenV2G EXI parsing...

Siemens OpenV2G memory corruption vulnerability

The primary scope of the OpenV2G project is to provide an open source implementation of the latest draft of the ISO/IEC Vehicle-to-Grid Communication Interface V2G CI standard.A memory corruption vulnerability exists in Siemens OpenV2G due to a missing length check in the OpenV2G EXI parsing...

CVE-2022-27242

A vulnerability has been identified in OpenV2G V0.9.4. The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption...

CVE-2022-27242

CVE-2022-27242 affects Siemens OpenV2G v0.9.4. The OpenV2G EXI parsing feature lacks a length check when parsing X509 serial numbers, enabling a potential buffer overflow and memory corruption. Public advisories (Siemens SSA-736385 and related sources) indicate Siemens released v0.9.5 as a remedi...

Siemens OpenV2G

1. EXECUTIVE SUMMARY CVSS v3 6.2 ATTENTION: Low attack complexity Vendor: Siemens Equipment: OpenV2G Vulnerability: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to trigger a memory corruption. 3. TECHNICAL DETAILS 3.1 AFFECTED...

CVE-2022-27242: Buffer Copy without Checking Size of Input

A vulnerability has been identified in OpenV2G V0.9.4. The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption...

PT-2022-3348

Name of the Vulnerable Software and Affected Versions OpenV2G version 0.9.4 Description A vulnerability has been identified in the OpenV2G EXI parsing feature, which is missing a length check when parsing X509 serial numbers. This allows an attacker to introduce a buffer overflow, leading to memo...