Siemens Heliox EV Chargers
view advisory published 2026-03-10
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27769US | — | — | ||
A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1). Affecte… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers - CSAF Versionself
- SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers - HTML Versionself
- ICS Advisory ICSA-26-071-05 JSONself
- ICS Advisory ICSA-26-071-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedHeliox Flex 180 kW EV Charging Station
Contact customer support for patch information via OTA update
- FixedHeliox Mobile DC 40 kW EV Charging Station
Contact customer support for patch information via OTA update
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan