Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-31929

Quick assessment

Affected
Siemens IEC 1Ph 7.4kW Child socket
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Siemens VersiCharge AC Series是德国西门子（Siemens）公司的一系列电动汽车充电器。 Siemens VersiCharge AC Series存在安全漏洞，该漏洞源于缺少不可变信任根，可能导致执行任意代码。

CVSS 4.2 · Medium EPSS 0.20% · P9
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-31929

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1326
Source: CVE Program / CVE List V5
Vulnerability Title
Siemens VersiCharge AC Series 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens VersiCharge AC Series是德国西门子（Siemens）公司的一系列电动汽车充电器。 Siemens VersiCharge AC Series存在安全漏洞，该漏洞源于缺少不可变信任根，可能导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Siemens IEC 1Ph 7.4kW Child socket 0 ~ * -
Siemens IEC 1Ph 7.4kW Child socket/ shutter 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent cable 7m 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent socket 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent socket incl. SIM 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent socket/ shutter 0 ~ * -
Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM 0 ~ * -
Siemens IEC 3Ph 22kW Child cable 7m 0 ~ * -
Siemens IEC 3Ph 22kW Child socket 0 ~ * -
Siemens IEC 3Ph 22kW Child socket/ shutter 0 ~ * -
Siemens IEC 3Ph 22kW Parent cable 7m 0 ~ * -
Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM 0 ~ * -
Siemens IEC 3Ph 22kW Parent socket 0 ~ * -
Siemens IEC 3Ph 22kW Parent socket incl. SIM 0 ~ * -
Siemens IEC 3Ph 22kW Parent socket/ shutter 0 ~ * -
Siemens IEC 3Ph 22kW Parent socket/ shutter SIM 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Child cable 7m 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Child cable 7m 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Child cable 7m 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Child socket 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Parent socket 0 ~ * -
Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI 0 ~ * -
Siemens UL Commercial Cellular 48A NTEP 0 ~ * -
Siemens UL Commercial Child 40A w/ 15118 HW 0 ~ * -
Siemens UL Commercial Child 48A BA Compliant 0 ~ * -
Siemens UL Commercial Child 48A w/ 15118 HW 0 ~ * -
Siemens UL Commercial Parent 40A with Simcard 0 ~ * -
Siemens UL Commercial Parent 48A (USPS) 0 ~ * -
Siemens UL Commercial Parent 48A BA Compliant 0 ~ * -

II. Public POCs for CVE-2025-31929

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-31929

请登录查看更多情报信息。

Same Patch Batch · Siemens · 2025-05-13 · 36 CVEs total

CVE-2025-26389 10.0 CRITICAL Siemens OZW672 操作系统命令注入漏洞
CVE-2025-32469 9.9 CRITICAL siemens多款产品 安全漏洞
CVE-2025-33024 9.9 CRITICAL Siemens多款产品 安全漏洞
CVE-2025-33025 9.9 CRITICAL Siemens多款产品 安全漏洞
CVE-2025-26390 9.8 CRITICAL Siemens OZW672和Siemens OZW772 SQL注入漏洞
CVE-2025-31930 8.8 HIGH Siemens VersiCharge AC Series 安全漏洞
CVE-2025-40566 8.8 HIGH Siemens SIMATIC PCS neo 代码问题漏洞
CVE-2025-40582 7.8 HIGH Siemens SCALANCE LPE9403 操作系统命令注入漏洞
CVE-2025-32454 7.8 HIGH Siemens Teamcenter Visualization 缓冲区错误漏洞
CVE-2025-40574 7.8 HIGH Siemens SCALANCE LPE9403 安全漏洞
CVE-2025-30175 7.5 HIGH Siemens多款产品 缓冲区错误漏洞
CVE-2024-23815 7.5 HIGH Siemens Desigo CC 访问控制错误漏洞
CVE-2025-24007 7.5 HIGH Siemens SIRIUS 3RK3 Modular Safety System和Siemens SIRIUS Safety Relays 3SK2 加密问题漏洞
CVE-2025-30174 7.5 HIGH Siemens多款产品 缓冲区错误漏洞
CVE-2025-30176 7.5 HIGH Siemens多款产品 缓冲区错误漏洞
CVE-2025-40581 7.1 HIGH Siemens SCALANCE LPE9403 安全漏洞
CVE-2025-40579 6.7 MEDIUM Siemens SCALANCE LPE9403 安全漏洞
CVE-2025-40580 6.7 MEDIUM Siemens SCALANCE LPE9403 安全漏洞
CVE-2024-51444 6.5 MEDIUM Siemens Polarion SQL注入漏洞
CVE-2024-51445 6.5 MEDIUM Siemens Polarion 代码问题漏洞

Showing top 20 of 36 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: IEC 1Ph 7.4kW Child socket
Same vendor: Siemens
Same weakness: CWE-1326

V. Comments for CVE-2025-31929

No comments yet

Leave a comment