The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
The OCPP DataTransfer message ReserveLogin is vulnerable to command injection. By manipulating the data value, arbitrary OS commands can be executed as root.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 86.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 86.00 |
VPI 公式 vpi-v1