High severity8.2NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026
CVE-2025-24003
CVE-2025-24003
Description
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*Range: <=1.6.5
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*Range: <=1.6.5
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*Range: <=1.6.5
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*Range: <=1.6.5
- Phoenix Contact/CHARX SEC-3000v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3050v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3100v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3150v5Range: 0.0.0
Patches
Vulnerability mechanics
References
1- certvde.com/en/advisories/VDE-2025-014nvdThird Party Advisory
News mentions
0No linked articles in our index yet.