SAST findings vary widely across 12 OCPP 1.6 language ports
SonarQube, Semgrep, and language-specific analyzers reported two issues in Rust and 1,689 in Java.
Stories per day · 30 days
Relatedev-charging26g1evse1fuzzing1midhaul1open5gs1o-ran1protocol-security1sast1semgrep1sonarqube1srsran1static-analysis1
3 stories, newest first · one card per story
Stories tagged #ocpp
Unprotected F1 midhaul lets a rogue O-DU intercept 6G testbed traffic
The chain was shown on Open5GS, srsRAN, FlexRIC and an OCPP 1.6 EV charging setup, not a production network.
EVSEFuzz auto-builds fuzzers for EV charging protocol implementations
Runs against open- and closed-source chargers found several flaws and led to two published CVEs.