Multiple connections to the backend using the same charging station ID
are allowed, which could allow an attacker to deploy multiple instances
of malicious OCPP clients to overwhelm the backend.
Hydro-Québec has updated the majority of charging stations to disable
OCPP, mitigating the risk of exploitation. Hydro-Québec has also
implemented authentication systems to mitigate the issue for certain
charging stations which are still reliant on OCPP. Contact Hydro-Québec
with any additional questions.