CVE-2025-24004

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
5.2MEDIUM
EPSS
0.0%
top 88.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Phoenix Contact Charx Sec-3000Phoenix Contact Charx Sec-3050Phoenix Contact Charx Sec-3100+5 more
Timeline
PublishedJul 8

Description

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:LExploitability: 0.9 | Impact: 4.2

Affected Packages8 packages

▶CVEListV5phoenix_contact/charx_sec-30000.0.0 — 1.6.5
▶CVEListV5phoenix_contact/charx_sec-30500.0.0 — 1.6.5
▶CVEListV5phoenix_contact/charx_sec-31000.0.0 — 1.6.5
▶CVEListV5phoenix_contact/charx_sec-31500.0.0 — 1.6.5

🔴Vulnerability Details

2
GHSA
GHSA-v2p4-fgcv-96mw: A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting↗2025-07-08
▶
CVEList
USB-C Buffer Overflow via Display Interface in EV Charging Stations↗2025-07-08
▶
CVE-2025-24004 (MEDIUM CVSS 5.2) | A physical attacker with access to | cvebase.io