Description
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | CHARX SEC-3150 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3100 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3050 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3000 | 0.0.0 – ≤ 1.6.5 | — |
Advisories 1
- VDE-2025-014 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers CERT@VDE · Jul 8, 2025