CVE-2025-24004 — USB-C Buffer Overflow via Display Interface in EV Charging Stations

CVE-2025-24004

USB-C Buffer Overflow via Display Interface in EV Charging Stations PUBLISHED

Description (CNA)

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / CHARX SEC-3150	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3100	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3050	affected 0.0.0 through 1.6.5
Phoenix Contact / CHARX SEC-3000	affected 0.0.0 through 1.6.5

CWE

CWE-120

References

https://certvde.com/de/advisories/VDE-2025-014

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.