CVE-2025-68141

low-risk
Published 2026-01-21

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structure is accessed out of bounds. This occurs in the method `template <> void convert(const struct iso20_dc_DetailedTaxType& in, datatypes::DetailedTax& out)` which leads to a null pointer dereference and causes the module to terminate. The EVerest processes and all its modules shut down, affecting all EVSE. Version 2025.10.0 fixes the issue.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.4/10 High
ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Linuxfoundation

References (1)

Exploit https://github.com/EVerest/everest-core/security/advisories/GHSA-ph4w-r9q8-vm9h
28
/ 100
low-risk
Severity 23/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal