steve-community kayıtları
steve-community üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %20
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control1
- CWE-287 Improper Authentication1
- CWE-331 Insufficient Entropy1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2023-52096İstismar yok | SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an applicsteve-community · ocpp-jaxb · CWE-89 | Yüksek7,5 | — | %0,6 | 26 Ara 2023 |
30İzleyin | CVE-2024-25407İstismar yok | SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.steve-community · steve · CWE-331 | Yüksek7,5 | — | %0,5 | 12 Şub 2024 |
24İzleyin | CVE-2024-21550İstismar yok | SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central sersteve-community · steve · CWE-79 | Orta6,1 | — | %0,3 | 12 Ağu 2024 |
23İzleyin | CVE-2024-44843İstismar yok | An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via ssteve-community · steve · CWE-287 | Orta5,9 | — | %0,4 | 15 Nis 2025 |
22İzleyin | CVE-2026-28230İstismar yok | In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)steve-community · steve · CWE-284 | Orta5,7 | — | %0,1 | 26 Şub 2026 |
- CVE-2023-5209630İzleyin
SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an applic
YüksekCVSS 7,5İstismar yokEPSS %0steve-community · ocpp-jaxb26 Ara 2023
- CVE-2024-2540730İzleyin
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.
YüksekCVSS 7,5İstismar yokEPSS %0steve-community · steve12 Şub 2024
- CVE-2024-2155024İzleyin
SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central ser
OrtaCVSS 6,1İstismar yokEPSS %0steve-community · steve12 Ağu 2024
- CVE-2024-4484323İzleyin
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via s
OrtaCVSS 5,9İstismar yokEPSS %0steve-community · steve15 Nis 2025
- CVE-2026-2823022İzleyin
In SteVe, any authenticated charger can terminate any other charger's active transaction (missing ownership verification on StopTransaction)
OrtaCVSS 5,7İstismar yokEPSS %0steve-community · steve26 Şub 2026