CVE-2022-27242: Siemens OPENV2G

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability has been identified in OpenV2G (V0.9.4). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

Affected products

• Siemens OPENV2G: version 0.9.4 only

Published 2022-05-20. Last modified 2026-06-17.