medium5.3
CVE-2025-24002
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporar…
Impact
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Charx Sec-3000 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3050 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3100 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3150 Firmware | through 1.6.5 |