The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.