Summary
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Low 2.6
A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile D…
Revision history
-
#2
Initial CISA Republication of Siemens ProductCERT SSA-126399 advisory
-
#1
Publication Date
References
-
SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-126399.html
-
ICS Advisory ICSA-26-071-05 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-05
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b