CVE-2025-27769

State: Published
Severity: 2.4 Low
Published: Mar 10, 2026
Updated: Mar 10, 2026
Reserved: Mar 6, 2025

Description

A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1). Affected devices contain improper access control that could allow an attacker to reach unauthorized services via the charging cable.

Scores

CVSS	Score	Vector	Source
4.0	2.4 Low	CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N	siemens
3.1	2.6 Low	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N	siemens

Weaknesses

CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

Affected Products

Product	Versions
Heliox Flex 180 kW EV Charging StationSiemens	before F4.11.1Affected
Heliox Mobile DC 40 kW EV Charging StationSiemens	before L4.10.1Affected

References

https://cert-portal.siemens.com/productcert/html/ssa-126399.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.