EUVD-2025-20409

Malicious code in bioql PyPI...

CVE-2025-24002

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...

CVE-2025-24003

An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations...

CVE-2025-24002

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...

CVE-2025-24002

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...

CVE-2025-24003

The CVE-2025-24003 entry describes an unauthenticated remote attack where MQTT messages trigger out-of-bounds writes in EichrechtAgents used by German EV charging stations, causing integrity loss and potential DoS. Root cause: out-of-bounds write via MQTT in EichrechtAgents; impact includes loss ...

CVE-2025-24002

CVE-2025-24002 concerns unauthenticated MQTT-triggered crashes of services on charging stations that comply with the German Calibration Law. The primary sources (NVD, CVE listing, Red Hat advisory, PT Security report, etc.) describe an MQTT-based DoS where a remote attacker can cause the charging...

CVE-2025-24002 MQTT DoS Vulnerability in German EV Charging Stations

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...

PT-2025-28341 · Unknown · Eichrechtagents

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law. This results in a loss of integrity for...

PHOENIX CONTACT CHARX SEC-3xxx 安全漏洞

PHOENIX CONTACT CHARX SEC-3000 etc. are products of PHOENIX CONTACT, Germany.PHOENIX CONTACT CHARX SEC-3000 is an AC charge controller.PHOENIX CONTACT CHARX SEC-3050 is an AC charge controller.PHOENIX CONTACT CHARX SEC-3100 is an AC charge controller. PHOENIX CONTACT CHARX SEC-3100 is an AC charg...