Session Management Vulnerability in Charging Stations by Major Vendor
CVE-2025-55705

7.3HIGH

Key Information:

Vendor

Evmapa

Status
Vendor
CVE Published:
22 January 2026

What is CVE-2025-55705?

This vulnerability allows for multiple concurrent connections using the same charging station ID, potentially leading to unauthorized access and manipulation of charging sessions. Attackers can exploit the absence of effective session management controls to reuse valid IDs, resulting in session conflicts and data integrity issues. This security flaw underscores the critical need for robust session handling mechanisms to prevent exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

EVMAPA All versions

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khaled Sarieddine and Mohammad Ali Sayed reported these vulnerabilities to CISA
.