← Database

CVE-2024-44843

MEDIUM CVSS: 5.9 Published: 2025-04-15 Modified: 2026-06-17

Description

An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbitrary coammands via supplying crafted OCPP requests.

Affected Platforms

Steve-Community Steve

Weakness Type

CWE-287

References