CVE-2025-31930
- State
- Published
- Severity
- 8.7 High
- Published
- May 13, 2025
- Updated
- May 13, 2025
- Reserved
- Apr 1, 2025
Description
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions < V2.135), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions < V2.135), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions < V2.135), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions < V2.135), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions < V2.135), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions < V2.135), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions < V2.135). Affected devices contain Modbus service enabled by default. This could allow an attacker connected to the same network to remotely control the EV charger.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N | siemens |
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | siemens |
Weaknesses
- CWE-1188 Initialization of a Resource with an Insecure Default
Affected Products
| Product | Versions |
|---|---|
IEC 1Ph 7.4kW Child socketSiemens |
|
IEC 1Ph 7.4kW Child socket/ shutterSiemens |
|
IEC 1Ph 7.4kW Parent cable 7mSiemens |
|
IEC 1Ph 7.4kW Parent cable 7m incl. SIMSiemens |
|
IEC 1Ph 7.4kW Parent socketSiemens |
|
IEC 1Ph 7.4kW Parent socket incl. SIMSiemens |
|
IEC 1Ph 7.4kW Parent socket/ shutterSiemens |
|
IEC 1Ph 7.4kW Parent socket/ shutter SIMSiemens |
|
IEC 3Ph 22kW Child cable 7mSiemens |
|
IEC 3Ph 22kW Child socketSiemens |
|
IEC 3Ph 22kW Child socket/ shutterSiemens |
|
IEC 3Ph 22kW Parent cable 7mSiemens |
|
IEC 3Ph 22kW Parent cable 7m incl. SIMSiemens |
|
IEC 3Ph 22kW Parent socketSiemens |
|
IEC 3Ph 22kW Parent socket incl. SIMSiemens |
|
IEC 3Ph 22kW Parent socket/ shutterSiemens |
|
IEC 3Ph 22kW Parent socket/ shutter SIMSiemens |
|
IEC ERK 3Ph 22 kW Child cable 7mSiemens |
|
IEC ERK 3Ph 22 kW Child cable 7mSiemens |
|
IEC ERK 3Ph 22 kW Child cable 7mSiemens |
|
IEC ERK 3Ph 22 kW Child socketSiemens |
|
IEC ERK 3Ph 22 kW Parent socketSiemens |
|
IEC ERK 3Ph 22 kW Parent socket incl. SISiemens |
|
UL Commercial Cellular 48A NTEPSiemens |
|
UL Commercial Child 40A w/ 15118 HWSiemens |
|
UL Commercial Child 48A BA CompliantSiemens |
|
UL Commercial Child 48A w/ 15118 HWSiemens |
|
UL Commercial Parent 40A with SimcardSiemens |
|
UL Commercial Parent 48A (USPS)Siemens |
|
UL Commercial Parent 48A BA CompliantSiemens |
|
UL Commercial Parent 48A with Simcard BASiemens |
|
UL Commercial Parent 48A, 15118, 25ftSiemens |
|
UL Commercial Parent 48A, 15118, 25ftSiemens |
|
UL Commercial Parent 48A, 15118, 25ftSiemens |
|
UL Commercial Parent 48A,15118 25ft SimSiemens |
|
VersiCharge Blue™ 80A AC CellularSiemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.