CVE-2025-68134: EVerest's use of assert functions can potentially lead to denial of service
EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the assert function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denial of service. In a context where a manager handles multiple EVSE, this would also impact other users. Version 2025.10.0 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68134?
CVE-2025-68134 is classified as a critical vulnerability that can lead to denial of service due to module crashes.
How do I fix CVE-2025-68134?
To fix CVE-2025-68134, upgrade to EVerest version 2025.12.0 or later.
What causes CVE-2025-68134?
CVE-2025-68134 is caused by the improper use of assert functions that can lead to unexpected crashes in the software.
Which versions of EVerest are affected by CVE-2025-68134?
EVerest versions prior to 2025.10.0 are affected by CVE-2025-68134.
Is CVE-2025-68134 a local or remote vulnerability?
CVE-2025-68134 can be exploited locally, leading to a denial of service on the affected installation.