CVE-2025-24003

🗓️ 08 Jul 2025 06:59:17Reported by CERTVDEType

Unauthenticated attacker can exploit MQTT messages to cause out-of-bounds writes in EichrechtAgents.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-24003	8 Jul 202507:08	–	circl
CNNVD	PHOENIX CONTACT CHARX SEC-3xxx 安全漏洞	8 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-24003 MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations	8 Jul 202506:59	–	cvelist
EUVD	EUVD-2025-20408	3 Oct 202520:07	–	euvd
NVD	CVE-2025-24003	8 Jul 202507:15	–	nvd
OSV	CVE-2025-24003	8 Jul 202507:15	–	osv
Positive Technologies	PT-2025-28341 · Unknown · Eichrechtagents	8 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-24003	10 Jul 202507:24	–	redhatcve
Vulnrichment	CVE-2025-24003 MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations	8 Jul 202506:59	–	vulnrichment

NVD

Vulners

Node

phoenixcontact charx_sec-3000_firmwareRange≤1.6.5

AND

phoenixcontact charx_sec-3000Match-

Node

phoenixcontact charx_sec-3050_firmwareRange≤1.6.5

AND

phoenixcontact charx_sec-3050Match-

Node

phoenixcontact charx_sec-3100_firmwareRange≤1.6.5

AND

phoenixcontact charx_sec-3100Match-

Node

phoenixcontact charx_sec-3150_firmwareRange≤1.6.5

AND

phoenixcontact charx_sec-3150Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3150",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3100",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3050",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3000",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThanOrEqual": "1.6.5",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/en/advisories/VDE-2025-014

11 Jul 2025 14:36Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.2

EPSS0.00397

SSVC

CWE-120