Synthèse
Expand All + CVE-2026-20744 The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. View CVE Details Affected Products Hydro-Québec Le Circuit Electrique charging station backend Vendor:Hydro-Québec Product Version:Hydro-Québec Le Circuit Electrique charging station backend: <June_2026 Product Status:known_affected Remediations MitigationHydro-Québec has updated the majority of charging stations to disable OCPP, m
Expand All + CVE-2026-20744 The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. View CVE Details Affected Products Hydro-Québec Le Circuit Electrique charging station backend Vendor:Hydro-Québec Product Version:Hydro-Québec Le Circuit Electrique charging station backend: 1 9. 8 CRITICAL CVSS:3. 1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 4. 0 9. 3 CRITICAL CVSS:4. 0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2026-42952 Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a Denial-of-Service attack. View CVE Details Affected Products Hydro-Québec Le Circuit Electrique charging station backend Vendor:Hydro-Québec Product Version:Hydro-Québec Le Circuit Electrique charging station backend: 1 7. 5 HIGH CVSS:3. 1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 4. 0 8. 7 HIGH CVSS:4.
Source originale
cve.org
cve.org · 7 juil.
cve.org · 7 juil.
CORTEX