This flaw can be exploited by an unauthenticated attacker sending a malformed SDP packet over the network. If the service is running over TCP, the overflow causes an infinite loop in the packet parsing logic, leading to a Denial of Service. If the service is running over TLS, the resulting incorrect size calculation can trigger a stack-based buffer overflow, which may allow for remote code execution. This vulnerability is documented as CVE-2025-68137 and a functional proof-of-concept exploit exists for the DoS condition.

Impact

Successful exploitation of this vulnerability results in service disruption, as the affected instance of EVerest will hang indefinitely upon processing a malicious SDP packet. In TLS-enabled deployments, the stack-based buffer overflow presents a significant risk of remote code execution, allowing an attacker to gain control over the affected system. This vulnerability affects systems using EVerest core versions prior to 2025.10.0, impacting environments where the software is deployed for EV charging infrastructure management.

Recommendation

1. Upgrade all instances of EVerest everest-core to version 2025.10.0 or later immediately to patch CVE-2025-68137.
2. Restrict network access to EVerest management interfaces to trusted IP addresses to prevent unauthenticated access to the SDP service.
3. Deploy network-level inspection to identify and block SDP packets with highly anomalous length fields (near 0xFFFFFFFF).