CVE-2024-37310: Everest Everest-Core

Critical severity, CVSS 9.0. EPSS: 0.7% chance of exploitation in the next 30 days.

EVerest is an EV charging software stack. An integer overflow in the "v2g_incoming_v2gtp" function in the v2g_server.cpp implementation can allow a remote attacker to overflow the process' heap. This vulnerability is fixed in 2024.3.1 and 2024.6.0.

Affected products

• Everest Everest-Core: before 2024.3.1 (fixed in 2024.3.1); from 2024.4.0, before 2024.6.0 (fixed in 2024.6.0); before 2024.6.0 (fixed in 2024.6.0)

Published 2024-07-10. Last modified 2026-06-17.