CVE-2025-31929

mediumpriority · track · 0EPSS 0.002 · 10 %ileDEEUNLUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.20% (10th) EPSS
CVSS 4.2 · medium
Is it mine?
692 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · cisa_csaf_ot · ncsc_nl

EPSS · scored 2026-10-27

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

The vendor does not plan to fix this; mitigate or replace.

  • No fix plannedIEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3)siemens_psirt

    Currently no fix is planned

  • No fix plannedUL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3)siemens_psirt

    Currently no fix is planned

  • No fix plannedVersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2)siemens_psirt

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedUL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedVersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

4.2
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 0.6–4.2

v3.14.2mediumCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · CISA US
v3.14.2mediumCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · productcert@siemens.com DEexploitability 0.5 · impact 3.6
v3.14.2mediumCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · Siemens ProductCERT DE
v4.04.1mediumCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:Nsecondary · ENISA EU
v4.04.1mediumCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.00.6lowCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1326USCWE-1326USCWE-1326USCWE-1326US
05

affected products (692)

Products and version ranges known to be affected.

showing 20 of 692
06

advisories (3)

Vendor and ecosystem advisories describing this.

  • NCSC-2025-0160Kwetsbaarheden verholpen in Siemens productenNL2025-05-14csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Apogee, BacNet ATEC, Desigo CC, Intralog, OZW, Polarion, RUGGEDCOM, SICAM, SIMATIC, SIPROTEC, SIRIUS, Teamcenter en Versicharge

  • SSA-556937SSA-556937: Multiple Vulnerabilities in VersiCharge AC Series EV Chargers2025-05-13csaf · siemens_psirtDE

    VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware. Siemens recommends countermeasures for products where fixes are not, or not yet available.

  • ICSA-25-135-08Siemens VersiCharge AC Series EV Chargers2025-05-13icsa · cisa_csaf_otUS

    VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otncsc_nlsiemens_psirtNVDCVE.orgMITRE
published 2025-05-13modified 2026-06-17
09

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan