CVE-2025-24003
8.2
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Exploitability: 3.9 / Impact: 4.2
Source: info@cert.vde.com (Secondary)
Description
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
Affected (4)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.6.5 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Charx Sec 3000 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.6.5 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Charx Sec 3050 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.6.5 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Charx Sec 3100 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.6.5 |
| Running on/with | Platform Versions |
|---|---|
Phoenixcontact Charx Sec 3150 | All versions |
References (1)
Timeline
No history available yet.