Riskcovery

CVE-2025-31929

State
Published
Severity
4.1 Medium
Published
May 13, 2025
Updated
May 13, 2025
Reserved
Apr 1, 2025

Read the record on cve.org

Description

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code.

Scores

CVSSScoreVectorSource
4.04.1 MediumCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:Nsiemens
3.14.2 MediumCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsiemens

Weaknesses

  • CWE-1326 Missing Immutable Root of Trust in Hardware

Affected Products

ProductVersions
IEC 1Ph 7.4kW Child socketSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Child socket/ shutterSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent cable 7mSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent cable 7m incl. SIMSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent socketSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent socket incl. SIMSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent socket/ shutterSiemens
  • all versionsAffected
IEC 1Ph 7.4kW Parent socket/ shutter SIMSiemens
  • all versionsAffected
IEC 3Ph 22kW Child cable 7mSiemens
  • all versionsAffected
IEC 3Ph 22kW Child socketSiemens
  • all versionsAffected
IEC 3Ph 22kW Child socket/ shutterSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent cable 7mSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent cable 7m incl. SIMSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent socketSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent socket incl. SIMSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent socket/ shutterSiemens
  • all versionsAffected
IEC 3Ph 22kW Parent socket/ shutter SIMSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Child cable 7mSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Child cable 7mSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Child cable 7mSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Child socketSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Parent socketSiemens
  • all versionsAffected
IEC ERK 3Ph 22 kW Parent socket incl. SISiemens
  • all versionsAffected
UL Commercial Cellular 48A NTEPSiemens
  • all versionsAffected
UL Commercial Child 40A w/ 15118 HWSiemens
  • all versionsAffected
UL Commercial Child 48A BA CompliantSiemens
  • all versionsAffected
UL Commercial Child 48A w/ 15118 HWSiemens
  • all versionsAffected
UL Commercial Parent 40A with SimcardSiemens
  • all versionsAffected
UL Commercial Parent 48A (USPS)Siemens
  • all versionsAffected
UL Commercial Parent 48A BA CompliantSiemens
  • all versionsAffected
UL Commercial Parent 48A with Simcard BASiemens
  • all versionsAffected
UL Commercial Parent 48A, 15118, 25ftSiemens
  • all versionsAffected
UL Commercial Parent 48A, 15118, 25ftSiemens
  • all versionsAffected
UL Commercial Parent 48A, 15118, 25ftSiemens
  • all versionsAffected
UL Commercial Parent 48A,15118 25ft SimSiemens
  • all versionsAffected
UL Resi High End 40A w/15118 HwSiemens
  • all versionsAffected
UL Resi High End 48A w/15118 HwSiemens
  • all versionsAffected
VersiCharge Blue™ 80A AC CellularSiemens
  • all versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.