Buffer Overflow Vulnerability in OpenV2G by Siemens
CVE-2025-24956

6.9MEDIUM

Key Information:

Vendor

Siemens
Status
Openv2g
Vendor
CVE Published:
11 February 2025

What is CVE-2025-24956?

A vulnerability exists in the OpenV2G software related to the EXI parsing of X509 serial numbers. The software fails to perform a necessary length check, leading to a potential buffer overflow. This flaw could enable attackers to exploit memory corruption, which may lead to Denial of Service or unauthorized access. Users are urged to upgrade to version 0.9.6 or later to mitigate this security risk.

Affected Version(s)

OpenV2G 0

References

https://cert-portal.siemens.com/productcert/html/ssa-6470...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.