Malicious OCPP Client Overload in Charging Station Backend

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: ICS-CERT

Description

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-44383

EUVD

EUVD-2026-43096

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-613	According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

Attack-Flow Graph

Executive Summary

This vulnerability allows multiple connections to the backend system using the same charging station ID. An attacker can exploit this by deploying multiple instances of malicious OCPP clients, which can overwhelm the backend.

Impact Analysis

The vulnerability can impact you by allowing an attacker to overwhelm the backend system through multiple malicious connections using the same charging station ID. This could lead to denial of service or disruption of normal backend operations.

Hi! I’m here to help you understand CVE-2026-44383. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70