Vendors / ePower Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now ePower records in CISA KEV No ePower vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00979 · Published 2026-03-05 · No fix listed CWE-306
Priority MEDIUM 45
The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-03-05 · No fix listed CWE-307
Priority LOW 37
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00434 · Published 2026-03-05 · No fix listed CWE-613
Priority LOW 36
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-03-05 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs