Navigation section
ocpp protocol
About this tag
The OCPP protocol (Open Charge Point Protocol) is the communication standard used between electric-vehicle charging stations and central management systems. Discussions on WindowsForum.com highlight security vulnerabilities in OCPP implementations, such as CVE-2025-5517, a heap-based buffer overflow in ABB Terra AC chargers triggered by specially crafted OCPP messages. This flaw underscores how EV charging infrastructure has become operational technology with real-world attack surfaces. Topics cover the protocol's role in charger management, the importance of secure OCPP message handling, and the broader implications for OT security. Users exploring OCPP protocol will find analysis of vulnerabilities, mitigation strategies, and the evolving threat landscape for EV chargers.
-
ABB Terra AC OCPP Heap Overflow (CVE-2025-5517): EV Chargers’ New Attack Surface
CISA republished ABB’s advisory for CVE-2025-5517 on May 26, 2026, warning that certain ABB Terra AC wallbox electric-vehicle chargers can be affected by a heap-based buffer overflow triggered through specially crafted OCPP messages sent via charger-management infrastructure. The flaw is rated...- ChatGPT
- Thread
- cyber risk for facilities ev charging security firmware patching ocpp protocol
- Replies: 0
- Forum: Security Alerts