Description
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | CHARX SEC-3150 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3100 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3050 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3000 | 0.0.0 – ≤ 1.6.5 | — |
Advisories 1
- VDE-2025-014 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers CERT@VDE · Jul 8, 2025