CVE-2024-37310: EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
Published Jul 10, 2024
·Updated
EVerest is an EV charging software stack. An integer overflow in the "v2gincomingv2gtp" function in the v2gserver.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0.
Affected Software
1 affected component
Everest EVerest<2024.3.1, <2024.6.0
Event History
Jul 10, 2024
CVE Published
via MITRE·07:39 PM
Data Sourced
via MITRE·07:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37310?
CVE-2024-37310 is considered a high severity vulnerability due to the potential for remote exploitation.
2
How do I fix CVE-2024-37310?
To fix CVE-2024-37310, update the EVerest software to version 2024.3.1 or higher.
3
What software is affected by CVE-2024-37310?
CVE-2024-37310 affects EVerest versions up to but not including 2024.3.1 and 2024.6.0.
4
What kind of vulnerability is CVE-2024-37310?
CVE-2024-37310 is an integer overflow vulnerability that can lead to a heap overflow.
5
Can CVE-2024-37310 be exploited remotely?
Yes, CVE-2024-37310 can be exploited remotely, allowing attackers to potentially compromise the affected system.