5.3

CVE-2025-24002

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Phoenixcontact ≫ Charx Sec-3000 Firmware Version <= 1.6.5
   Phoenixcontact ≫ Charx Sec-3000 Version-
Phoenixcontact ≫ Charx Sec-3050 Firmware Version <= 1.6.5
   Phoenixcontact ≫ Charx Sec-3050 Version-
Phoenixcontact ≫ Charx Sec-3100 Firmware Version <= 1.6.5
   Phoenixcontact ≫ Charx Sec-3100 Version-
Phoenixcontact ≫ Charx Sec-3150 Firmware Version <= 1.6.5
   Phoenixcontact ≫ Charx Sec-3150 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.11% 0.294
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
info@cert.vde.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.