CISA ICSA-26-176-02: EVoke Systems Charging Station Management System Multiple Vulnerabilities Advisory

Vulnerability Overview Vulnerability Name: EVoke Systems Charging Station Management System Publication Date: June 25, 2026 Alert Code: ICSA-26-176-02 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Scope of Impact Affected Versions: All versions of EVoke CSMS CVSS Score: 9.4 Vendor: EVoke Systems Device: EVoke Systems Charging Station Management System Vulnerability Types: - Lack of Authentication for Critical Function - Inadequate Restriction of Excessive Authentication Attempts - Insufficient Session Expiration - Insufficient Protection of Credentials Remediation Recommended Practices: - Minimize network exposure, ensuring that all industrial control system (ICS) devices and/or systems are not accessible via the Internet. - Place ICS networks and remote devices behind firewalls and isolate them from the corporate network. - When remote access is required, use more secure remote access methods, such as Virtual Private Networks (VPNs), and recognize that VPNs may have vulnerabilities; ensure they are updated to the latest versions. - Organizations should conduct appropriate impact analysis and risk assessments before deploying defensive measures. - Implement recommended cybersecurity strategies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activities and report findings to CISA. Vulnerability Details CVE-2026-40702 CVE-2026-50176 CVE-2026-54479 CVE-2026-44622 Acknowledgments Reporters: Khaled Sarieddine and Mohammad Ali Sayed Legal Notice and Terms of Use This product is subject to this notice and privacy and usage policies. Revision History Initial Publication Date: 2026-06-25 Revision Version: 1 Summary: Initial Release Tags Industry: Energy Sector, Transportation Systems Industry Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Advisories Schneider Electric PowerLogic P7 Horner Automation Cscape Daktronics Controller Firmware Yokogawa FAST/TOOLS and CI Server Feedback Please share your thoughts; we have recently updated our anonymous product survey and welcome your feedback. Footer CISA Central: 1-844-Say-CISA, contact@cisa.dhs.gov CISA.gov: Official website of the U.S. Department of Homeland Security The above is a summary of key vulnerability information extracted from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-26-176-02: EVoke Systems Charging Station Management System Multiple Vulnerabilities Advisory

More from this source