Lucene search
+L

4484 matches found

CNNVD
CNNVD
added 2026/03/09 12:00 a.m.17 views

MBS多款产品 安全漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have security...

7.5CVSS5.9AI score0.00318EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.20 views

MBS多款产品 路径遍历漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have a path...

6.5CVSS6AI score0.00498EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.18 views

MBS多款产品 安全漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have security...

9.1CVSS6AI score0.00265EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.17 views

MBS多款产品 安全漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. MBS UBR-01 Mk II is a remote base station device. MBS UBR-02 is also a remote base station device. MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have security vulnerabilities;...

8.1CVSS6AI score0.00326EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.15 views

MBS多款产品 数据伪造问题漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have vulnerabiliti...

7.2CVSS5.8AI score0.0022EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/09 12:00 a.m.20 views

MBS多款产品 安全漏洞

MBS UBR-01 Mk II, etc., are products of the German MBS company. The MBS UBR-01 Mk II is a remote base station device. The MBS UBR-02 is also a remote base station device. The MBS UBR-LON is a communication interface device for industrial automation systems. Several MBS products have security...

6.5CVSS5.9AI score0.00241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/07 7:31 p.m.13 views

CVE-2026-27027

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/07 7:31 p.m.15 views

CVE-2026-27777

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/07 7:31 p.m.17 views

CVE-2026-26051

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS5.8AI score0.00871EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/07 7:31 p.m.12 views

CVE-2026-26288

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS5.8AI score0.00637EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/07 1:44 a.m.12 views

CVE-2026-27770

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00294EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/07 1:43 a.m.13 views

CVE-2026-22552

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS5.8AI score0.00889EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/06 6:31 p.m.14 views

EUVD-2026-10041

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00243EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/06 6:31 p.m.16 views

EUVD-2026-10035

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS5.8AI score0.00637EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/06 6:31 p.m.12 views

EUVD-2026-10031

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

7.3CVSS5.8AI score0.00252EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/06 4:16 p.m.19 views

CVE-2026-27764

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers and enables session hijacking or shadowing, where the most recent...

8.6CVSS0.00295EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/06 4:16 p.m.25 views

CVE-2026-27777

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS0.00243EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/06 4:16 p.m.23 views

CVE-2026-27027

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS0.00222EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/06 3:31 p.m.28 views

EUVD-2026-10034

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

9.4CVSS5.8AI score0.00871EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/06 3:20 p.m.10 views

CVE-2026-27027 Everon api.everon.io Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder