Skip to content
OpenAdvisories
High SSA-556937 2 CVEs

SSA-556937: Multiple Vulnerabilities in VersiCharge AC Series EV Chargers

Published May 13, 2025 · Updated May 14, 2025 · Revision 2

Vendor: Siemens Product: IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) Product: IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) Product: IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) Product: IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) Product: IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) Product: IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) Product: IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) Product: IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) Product: IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) Product: IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) Product: IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) Product: IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) Product: IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) Product: IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) Product: IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) Product: IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) Product: IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) Product: IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) Product: IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) Product: IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) Product: IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) Product: IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) Product: IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) Product: UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) Product: UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) Product: UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) Product: UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) Product: UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) Product: UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) +9 more

Summary

VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware.

Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #2

    Corrected the remediation for CVE-2025-31930

  2. #1

    Publication Date

References