CVE-2025-24003CWE-120
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
High · published July 8, 2025
What it is
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
The record
Technical detail
- CVSS v3.1
- 8.2 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00402 · 33.3th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2025-07-08T06:59Z
EPSS history
Timeline