CVE-2025-25271CWE-1188

OCPP Backend Configuration via Insecure Defaults

High · published July 8, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-07-08T07:01Z
EPSS history
Timeline
  • 08 JUL 07:01Z
    OCPP Backend Configuration via Insecure Defaults
    cvelistv5