CVE-2025-24003
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
Reserved 2025-01-16 | Published 2025-07-08 | Updated 2025-07-08 | Assigner CERTVDECWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Jesson Soto Ventura
Matthew Waddell
certvde.com/en/advisories/VDE-2025-014
Support options
