The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect u

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and m