Описание
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
Затрагиваемое ПО
Phoenixcontact Charx sec-3000 firmwarePhoenixcontact Charx sec-3000Phoenixcontact Charx sec-3050 firmwarePhoenixcontact Charx sec-3050Phoenixcontact Charx sec-3100 firmwarePhoenixcontact Charx sec-3100Phoenixcontact Charx sec-3150 firmwarePhoenixcontact Charx sec-3150
CVSS
| Балл | 8.2 — высокая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
Источники
https://certvde.com/en/advisories/VDE-2025-014