ePower epower.ie

Multiple critical vulnerabilities discovered in ePower epower.ie charging stations affecting all versions. Vulnerabilities include missing authentication for critical functions, improper restriction of authentication attempts, insufficient session expiration, and insufficiently protected credentials. Successful exploitation could enable attackers to gain unauthorized administrative control over charging stations or disrupt charging services through denial-of-service attacks. The vulnerabilities affect energy and transportation critical infrastructure sectors worldwide. ePower did not respond to CISA's coordination requests.