Vulnerability Description
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-18
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-01
- https://www.hydroquebec.com/nous-joindre/
FAQ
What is CVE-2026-44383?
CVE-2026-44383 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
How severe is CVE-2026-44383?
CVE-2026-44383 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-44383?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.