CVE-2025-24003
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
HIGH 8.2EPSS 0.4%
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
- Affected
- Phoenix Contact · CHARX SEC-3150 · CHARX SEC-3100 · CHARX SEC-3050 · CHARX SEC-3000
- CVSS v3.1 CERT
- 8.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - EPSS
- 0.40% chance of exploitation in the next 30 days, 33rd percentile
- Published
- 2025-07-08
Proof-of-concept exploits (1)
- Jessonsotoventura/charx-sec-exploits0★ · 2025-09-23