Mobility46 WebSocket Session Hijacking Vulnerability

A vulnerability in the WebSocket backend of Mobility46's EV charging management system allows multiple endpoints to connect using the same session identifier. This flaw creates predictable session identifiers, enabling session hijacking or shadowing. The most recent connection can displace the legitimate charging station, receiving backend commands intended for that station. This vulnerability could allow unauthorized users to authenticate as other users or enable a denial-of-service condition by overwhelming the backend with valid session requests.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication as other users, session hijacking, or a denial-of-service condition by flooding the backend with valid session requests.

Remediation

Mobility46 did not respond to CISA's request for coordination. Contact Mobility46 using their contact page for more information.