Vendors / steve-community Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now steve-community records in CISA KEV No steve-community vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00562 · Published 2024-02-13 · No fix listed CWE-331
Priority HIGH 68
An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.
CVSS 3.1 MEDIUM 5.9· Network · Low privileges · User interaction · EPSS 0.00443 · Published 2025-04-15 · No fix listed CWE-287
Priority LOW 27
SteVe is an open platform that implements different version of the OCPP protocol for Electric Vehicle charge points, acting as a central server for management of registered charge points.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00399 · Published 2024-08-12 · Fixed in 3.5.1, 3.6.1 +1 CWE-79
Priority LOW 25
SteVe is an open-source EV charging station management system.
CVSS 4.0 MEDIUM 5.7· Network · Low privileges · No interaction · EPSS 0.00185 · Published 2026-02-26 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs