← Database
CVE-2025-25271
HIGH
CVSS: 8.8
Published: 2025-07-08
Modified: 2026-06-17
Description
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
Affected Platforms
Phoenixcontact Charx Sec-3000Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100Phoenixcontact Charx Sec-3150 FirmwarePhoenixcontact Charx Sec-3150Phoenixcontact Charx Sec-3050Phoenixcontact Charx Sec-3100 Firmware