CNNVD-202507-870 Information

CNNVD ID

CNNVD-202507-870

CVE-2025-25271

  • CNNVD Published: 2025-07-08

Description (Chinese)

PHOENIX CONTACT CHARX SEC是德国菲尼克斯电气(PHOENIX CONTACT)公司的一系列 AC 充电控制器。 PHOENIX CONTACT CHARX SEC存在安全漏洞,该漏洞源于未经认证的相邻攻击者由于配置接口默认不安全,能够配置新的OCPP后端。

Description (English)

PHOENIX CONTATT CHARX SEC is a series of AC charge controllers for PHOENIX CONTACT in Germany. PHOENIX CONTATT CHARX SEC has a security loophole, which stems from the fact that uncertified neighbouring attackers are able to configure the new OCPP backend due to the default security of the configuration interface.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Phoenix Site

Published

2025-07-08

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-25271

Patch

https://www.phoenixcontact.com/en-us/

Share on: