A critical session management vulnerability in the SWITCH EV WebSocket backend allows unauthorized session hijacking and potential denial-of-service, necessitating immediate attention.

The application suffers from insufficient session expiration due to predictable session identifiers. This allows an unauthenticated attacker to hijack active sessions or cause a denial-of-service by displacing legitimate charging station connections.

Successful exploitation of this flaw allows unauthorized actors to intercept or manipulate command traffic intended for charging stations. Given the CVSS score of 7.3, this represents a significant risk to operational integrity, potentially leading to unauthorized control of infrastructure, service disruption, and loss of trust in the charging network management system.

Immediate Action: Contact the vendor immediately to obtain security guidance or patches, as no specific version fix is currently documented. Restrict network access to the WebSocket backend to known, trusted IP addresses to prevent unauthorized connections.

Proactive Monitoring: Review WebSocket traffic logs for multiple concurrent connections using the same identifier. Monitor for sudden drops in connectivity for legitimate charging stations, which may indicate session displacement.

Compensating Controls: Implement strict network segmentation and utilize a Web Application Firewall (WAF) to inspect and filter WebSocket handshake traffic for suspicious or malformed identifier patterns.

Public Exploit Available: Unknown

This vulnerability presents a clear risk to the stability and security of charging infrastructure. Organizations utilizing the SWITCH EV backend should prioritize the implementation of network-level access controls while awaiting formal vendor updates. Patching or upgrading the software remains the primary requirement to eliminate the underlying session management defect.