The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
The OCPP DataTransfer message ReserveLogin is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 86.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 86.00 |
VPI formula vpi-v1