Privilege Escalation Vulnerability in OCPP Agent Service

CVE-2024-25999

What is CVE-2024-25999?

A vulnerability has been identified in the OCPP agent service provided by VDE Technologies, which allows an unauthenticated local attacker to exploit improper input validation. Through this oversight, attackers can escalate privileges, potentially gaining unauthorized access to sensitive functions and data. Organizations utilizing the OCPP agent service are encouraged to review their system configurations and implement necessary security measures to mitigate this risk.

References