CVE-2026-22541
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-07

Last updated on: 2026-01-08

Assigner: S21sec

Description
The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows control the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-07
Last Modified
2026-01-08
Generated
2026-06-16
AI Q&A
2026-01-07
EPSS Evaluated
2026-06-15
NVD
CVE-2026-22541
EUVD
EUVD-2026-1208
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
thales evcharger *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the massive sending of ICMP requests that causes a denial of service on one of the boards in the EVCharger. This board controls the EV interfaces, and if it is not operating correctly due to the attack, the charger itself will not function properly.

Impact Analysis

The impact of this vulnerability is a denial of service on the EVCharger, which means the charger may stop functioning correctly. This could prevent electric vehicles from being charged, causing inconvenience or disruption to users relying on the charger.

Detection Guidance

This vulnerability involves a massive sending of ICMP requests causing a denial of service. To detect it, monitor your network traffic for unusually high volumes of ICMP echo requests (ping). You can use commands like 'tcpdump icmp' or 'wireshark' to capture and analyze ICMP traffic. Additionally, using 'netstat' or 'ss' to check for excessive ICMP connections or monitoring system logs for ICMP flood alerts can help detect the attack.

Mitigation Strategies

Immediate mitigation steps include implementing rate limiting or filtering of ICMP requests on your network devices or firewalls to prevent ICMP flood attacks. You can also configure intrusion prevention systems (IPS) to detect and block excessive ICMP traffic. Ensuring that the EVCharger board firmware is updated and monitoring the device for abnormal behavior are also recommended.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22541. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart