CVE-2025-25271
HIGH EPSS 20.5%
Published Jul 8, 202511mo ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
Published Jul 8, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago
Description
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
20.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-1188
Affected Products 8
| Vendor | Product | Version | Range |
|---|---|---|---|
| phoenixcontact | charx_sec-3000_firmware | * | <1.7.3 |
| phoenixcontact | charx_sec-3000 | * | any |
| phoenixcontact | charx_sec-3050_firmware | * | <1.7.3 |
| phoenixcontact | charx_sec-3050 | * | any |
| phoenixcontact | charx_sec-3100_firmware | * | <1.7.3 |
| phoenixcontact | charx_sec-3100 | * | any |
| phoenixcontact | charx_sec-3150_firmware | * | <1.7.3 |
| phoenixcontact | charx_sec-3150 | * | any |
References 1
- certvde.com https://certvde.com/de/advisories/VDE-2025-019
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.