CVE-2025-24003 — MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations

CVE-2025-24003

MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations PUBLISHED

Description (CNA)

An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / CHARX SEC-3150	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3100	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3050	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3000	affected 0.0.0 through 1.6.5

CWE

CWE-120

References

https://certvde.com/en/advisories/VDE-2025-014

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.