PT-2026-57340 · Hydro Québec · Le Circuit Electrique Charging Station Backend

Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-44383

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

CVE-2026-44383

Produtos afetados

Le Circuit Electrique Charging Station Backend

Referências · 4

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-188-01.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-44383 · Nota de Segurança
• https://hydroquebec.com/nous-joindre · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-26-188-01 · Nota