CVE-2025-24003
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
- Score
- CVSS 3.1 8.2 High
- Status
- Analyzed - info@cert.vde.com
- Published
- 2025-07-08
- Last modified
- 2025-07-08
- Weaknesses
- CWE-120
Affected products
- Charx Sec-3000 (Phoenix Contact)
- Charx Sec-3050 (Phoenix Contact)
- Charx Sec-3100 (Phoenix Contact)
- Charx Sec-3150 (Phoenix Contact)
- Charx Sec-3000 Firmware (Phoenixcontact)
- Charx Sec-3050 Firmware (Phoenixcontact)
- Charx Sec-3100 Firmware (Phoenixcontact)
- Charx Sec-3150 Firmware (Phoenixcontact)
References
- https://certvde.com/en/advisories/VDE-2025-014
