EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
概要
EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines transaction_active=false and only calls withdraw_authorization_callback. This path ultimately calls Charger::deauthorize(), but no actual stop (StopTransaction) occurs in the Charging state. As a result, authorization withdrawal can be defeated by timing, allowing charging to continue. Version 2026.02.0 contains a patch.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov