CVE-2026-27770 ePower epower.ie Insufficiently Protected Credentials

MediumCVSS 6.9 EPSS 0.33%

Published: 2026-03-06 01:39
Updated: 2026-06-17 13:27
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Affected products

Product	Affected versions	Fixed in
epower.ie	= All versions	No fix listed

References

CVSS v4.0

6.9 Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Vulnerable System Confidentiality: Low
Vulnerable System Integrity: Low
Vulnerable System Availability: None
Subsequent System Confidentiality: None
Subsequent System Integrity: None
Subsequent System Availability: None

All scores (4)

v4.0 6.9 · icscert
v4.0 6.9 · ics-cert@hq.dhs.gov
v3.1 6.5 · icscert
v3.1 6.5 · ics-cert@hq.dhs.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.33% (percentile 26.6)
CWE: CWE-522

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.