Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: EVMAPA Component: Evmapa Clear all filters
TI-2025-34570 CVE-2025-54816 · GHSA-fpfh-v96r-h7v9

EVMAPA Missing Authentication for Critical Function

Priority MEDIUM 49

This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to establish connections.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2026-01-22 No fix listed CWE-306
TI-2025-35135 CVE-2025-55705 · GHSA-857q-pww2-xgv7

EVMAPA Insufficient Session Expiration

Priority MEDIUM 48

This vulnerability occurs when the system permits multiple simultaneous connections to the backend using the same charging station ID.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00333 Published 2026-01-22 No fix listed CWE-613