← CVE Intelligence

CVE-2025-25271

OCPP Backend Configuration via Insecure Defaults PUBLISHED

Description (CNA)

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.

Affected (CNA)

Vendor / productVersions
Phoenix Contact / CHARX SEC-3150affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3100affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3050affected 0.0.0 before 1.7.3
Phoenix Contact / CHARX SEC-3000affected 0.0.0 before 1.7.3

CWE

CWE-1188

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.