CVE-2025-24002 — MQTT DoS Vulnerability in German EV Charging Stations

CVE-2025-24002

MQTT DoS Vulnerability in German EV Charging Stations PUBLISHED

Description (CNA)

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / CHARX SEC-3150	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3100	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3050	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3000	affected 0.0.0 through 1.6.5

CWE

CWE-20

References

https://certvde.com/en/advisories/VDE-2025-014

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.