High severity8.8NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026
CVE-2025-25271
CVE-2025-25271
Description
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*Range: <1.7.3
- cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*Range: <1.7.3
- cpe:2.3:o:phoenixcontact:charx_sec-3100_firmware:*:*:*:*:*:*:*:*Range: <1.7.3
- cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*Range: <1.7.3
- Phoenix Contact/CHARX SEC-3000v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3050v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3100v5Range: 0.0.0
- Phoenix Contact/CHARX SEC-3150v5Range: 0.0.0
Patches
Vulnerability mechanics
References
1- certvde.com/de/advisories/VDE-2025-019nvdThird Party Advisory
News mentions
0No linked articles in our index yet.