Insecure Configuration Interface in OCPP Backend by a Leading Vendor
CVE-2025-25271
8.8HIGH
What is CVE-2025-25271?
An adjacent attacker can exploit insecure default settings in the OCPP backend's configuration interface, allowing unauthorized configuration changes. This vulnerability presents a critical risk as it enables potential manipulation of the backend system, eroding the integrity and security of connected devices. Proper security measures and configurations are essential to mitigate this risk and protect against unauthorized access.
Affected Version(s)
CHARX SEC-3000 0.0.0 < 1.7.3
CHARX SEC-3050 0.0.0 < 1.7.3
CHARX SEC-3100 0.0.0 < 1.7.3