CVE-2024-37310

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-190

Affected software

Vendor	Product	Versions
EVerest	everest-core	< 2024.3.1; >= 2024.4.0, < 2024.6.0
everest	everest-core	< 2024.6.0

References

Timeline

Published: Jul 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-373118.2Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections fr CVE-2024-373126.3user_oidc app is an OpenID Connect user backend for Nextcloud. Missing access control on the ID4me endpoint allows an attacker to register a CVE-2024-373137.5Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after su CVE-2024-373143.5Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud CVE-2024-373154.3Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a CVE-2024-373164.6Nextcloud Calendar is a calendar app for Nextcloud. Authenticated users could create an event with manipulated attachment data leading to a CVE-2024-373174.6The Nextcloud Notes app is a distraction free notes taking app for Nextcloud. If an attacker managed to share a folder called `Notes/` with CVE-2024-373188.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-373198.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-37325.4The GeoDirectory – WordPress Business Directory Plugin, or Classified Directory plugin for WordPress is vulnerable to Stored Cross-Site Scri CVE-2024-373208.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability CVE-2024-373218.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability