CVE-2025-24002

MQTT DoS Vulnerability in German EV Charging Stations

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.

Affected

Phoenix Contact · CHARX SEC-3150 · CHARX SEC-3100 · CHARX SEC-3050 · CHARX SEC-3000

CVSS v3.1 CERT

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.43% chance of exploitation in the next 30 days, 35th percentile

Published

2025-07-08

Proof-of-concept exploits (1)

• Jessonsotoventura/charx-sec-exploits0★ · 2025-09-23

Security advisories

• https://certvde.com/en/advisories/VDE-2025-014

References

• CVE Record
• NVD entry

Related

• CVE-2025-24003
• CVE-2025-24004
• CVE-2025-24005
• CVE-2025-24006