Low SSA-126399 1 CVE

SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers

Published Mar 10, 2026 · Updated Mar 10, 2026

Vendor: Siemens Product: Heliox Flex 180 kW EV Charging Station Product: Heliox Mobile DC 40 kW EV Charging Station

Summary

Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Low 2.6

CVE-2025-27769

A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile D…

Siemens Heliox Flex 180 kW EV Charging Station Heliox Mobile DC 40 kW EV Charging Station ICS / OT

Mar 10, 2026

Revision history

2026-03-10 #1
Publication Date

References

SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-126399.html