CVE-2026-22540

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly.

CVSS

No CVSS.

References

Link	Resource
https://cds.thalesgroup.com/en

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) El envío masivo de solicitudes ARP causa una denegación de servicio en una placa del cargador que permite el control de las interfaces del VE. Dado que la placa debe estar funcionando correctamente para que el cargador también funcione correctamente.

07 Jan 2026, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-07 15:15

Updated : 2026-04-15 00:35

NVD link : CVE-2026-22540

Mitre link : CVE-2026-22540

CVE.ORG link : CVE-2026-22540

JSON object : View

Products Affected

No product.

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2026-22540", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "50b5080a-775f-442e-83b5-926b5ca517b6", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-01-07T15:15:46.703", "references": [{"url": "https://cds.thalesgroup.com/en", "source": "50b5080a-775f-442e-83b5-926b5ca517b6"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "50b5080a-775f-442e-83b5-926b5ca517b6", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV interfaces. Since the board must be operating correctly for the charger to also function correctly."}, {"lang": "es", "value": "El env\u00edo masivo de solicitudes ARP causa una denegaci\u00f3n de servicio en una placa del cargador que permite el control de las interfaces del VE. Dado que la placa debe estar funcionando correctamente para que el cargador tambi\u00e9n funcione correctamente."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "50b5080a-775f-442e-83b5-926b5ca517b6"}