Executive Summary

CVE-2026-24696 is a vulnerability in the WebSocket Application Programming Interface (API) of a charging station platform identified as CSAFPID-0001.

The vulnerability arises because the WebSocket API does not limit the number of authentication requests an attacker can make.

This lack of rate limiting allows attackers to perform denial-of-service (DoS) attacks by suppressing or misrouting legitimate charger telemetry data.

Additionally, attackers can conduct brute-force attacks to gain unauthorized access to the system.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by enabling attackers to disrupt the availability of the charging station platform through denial-of-service attacks.

Such attacks can suppress or misroute legitimate telemetry data, potentially causing operational failures or loss of service.

Moreover, the vulnerability allows brute-force attacks that could lead to unauthorized access, compromising system security.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves the WebSocket API lacking rate limiting on authentication requests, which may be detected by monitoring for excessive or abnormal authentication attempts over the network.

Detection can involve analyzing network traffic for unusually high volumes of authentication requests to the WebSocket API endpoints, which may indicate brute-force or denial-of-service attempts.

Specific commands are not provided in the available resources.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include minimizing network exposure of control system devices and isolating control system networks behind firewalls.

Use secure remote access methods such as updated VPNs to reduce the risk of unauthorized access.

Perform proper impact analysis and risk assessments before deploying any defensive measures.

Follow established procedures for reporting suspected malicious activity to CISA.

Note that the affected platform by Everon was shut down on December 1st, 2025, which is a key mitigation step.

Useful 0 Not Useful 0