CVE-2026-22541

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-07

Last updated on: 2026-01-08

Assigner: S21sec

Description

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-07

Last Modified

2026-01-08

Generated

2026-07-06

AI Q&A

2026-01-08

EPSS Evaluated

2026-07-05

NVD

CVE-2026-22541

EUVD

EUVD-2026-1208

Affected Vendors & Products

Vendor	Product	Version / Range
thales	evcharger	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Detection Guidance

This vulnerability involves a massive sending of ICMP requests causing a denial of service. To detect it, monitor your network traffic for unusually high volumes of ICMP echo requests (ping). You can use commands like 'tcpdump icmp' or 'wireshark' to capture and analyze ICMP traffic. Additionally, using 'netstat' or 'ss' to check for excessive ICMP connections or monitoring system logs for ICMP flood alerts can help detect the attack.

Mitigation Strategies

Immediate mitigation steps include implementing rate limiting or filtering of ICMP requests on your network devices or firewalls to prevent ICMP flood attacks. You can also configure intrusion prevention systems (IPS) to detect and block excessive ICMP traffic. Ensuring that the EVCharger board firmware is updated and monitoring the device for abnormal behavior are also recommended.

Executive Summary

This vulnerability involves the massive sending of ICMP requests that causes a denial of service on one of the boards in the EVCharger. This board controls the EV interfaces, and if it is not operating correctly due to the attack, the charger itself will not function properly.

Impact Analysis

The impact of this vulnerability is a denial of service on the EVCharger, which means the charger may stop functioning correctly. This could prevent electric vehicles from being charged, causing inconvenience or disruption to users relying on the charger.

Hi! I’m here to help you understand CVE-2026-22541. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70