Critical Flaws in Everon OCPP Backends Expose Charging Stations
Basically, hackers can control electric car chargers due to security flaws.
Everon OCPP Backends face critical vulnerabilities that allow hackers to control charging stations. This affects electric vehicle users worldwide, risking service disruptions. Everon has announced a platform shutdown to mitigate these issues.
What Happened
Imagine plugging in your electric car only to find that someone else has taken control of the charging station. This alarming scenario is now a reality for users of Everon OCPP? Backends, which manage electric vehicle charging stations worldwide. Four critical vulnerabilities have been discovered that allow attackers to gain unauthorized access and disrupt services.
The vulnerabilities stem from issues like missing authentication? and insufficient session management. For instance, attackers can impersonate legitimate charging stations, manipulate data, or even conduct denial-of-service attacks?. This means they can overwhelm the system, preventing legitimate users from charging their vehicles.
Why Should You Care
If you own an electric vehicle or rely on public charging stations, this news directly impacts you. Imagine arriving at a charging station only to find it offline or malfunctioning due to a cyberattack. Your ability to charge your vehicle could be compromised, leading to frustration and inconvenience.
Moreover, these vulnerabilities can affect the broader energy infrastructure. As electric vehicles become more common, the security of charging stations is crucial for a smooth transition to sustainable transportation. If hackers can disrupt these services, it could undermine public trust in electric vehicles and the entire charging ecosystem.
What's Being Done
In response to these vulnerabilities, Everon has taken the drastic step of shutting down their platform, effective December 1st, 2025. This move aims to protect users from potential exploitation. However, if you are currently using Everon OCPP? Backends, here’s what you should do:
- Stop using affected charging stations immediately.
- Monitor for updates from Everon regarding the situation.
- Consider alternative charging solutions until the vulnerabilities are addressed.
Experts are closely monitoring the situation to see if attackers will exploit these vulnerabilities before the shutdown. The focus will be on how quickly Everon can implement fixes and restore user confidence in their services.
CISA Advisories