CVE-2025-68135: EVerest's inadequate exception handling leads to denial of service
EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the TbdController loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers. Version 2025.10.0 fixes the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68135?
CVE-2025-68135 has been identified as leading to a denial of service due to inadequate exception handling.
How do I fix CVE-2025-68135?
To mitigate CVE-2025-68135, upgrade EVerest to version 2025.10.0 or later.
What type of vulnerability is CVE-2025-68135?
CVE-2025-68135 is a vulnerability related to inadequate exception handling in the EVerest software.
What software is affected by CVE-2025-68135?
CVE-2025-68135 affects EVerest versions prior to 2025.10.0.
What are the consequences of CVE-2025-68135?
The main consequence of CVE-2025-68135 is the potential for denial of service, causing the system to terminate unintentionally.