high8.2
CVE-2025-24003
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting …
Impact
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Charx Sec-3000 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3050 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3100 Firmware | through 1.6.5 |
| Phoenixcontact | Charx Sec-3150 Firmware | through 1.6.5 |