CVE-2025-24004 USB-C Buffer Overflow via Display Interface in EV Charging Stations

What is CVE-2025-24004?

CVE-2025-24004 is a medium-severity memory corruption vulnerability in Phoenix Contact CHARX SEC-3000, published on 8 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.

Weakness: CWE-120

Which versions are affected by CVE-2025-24004?

It affects 4 products.

Products include Phoenixcontact Charx Sec-3000 Firmware, Phoenixcontact Charx Sec-3050 Firmware, Phoenixcontact Charx Sec-3100 Firmware, Phoenixcontact Charx Sec-3150 Firmware.

How do I fix CVE-2025-24004?

No fix has been published for CVE-2025-24004 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-24004 being exploited?

There is no known exploitation of CVE-2025-24004 in the wild and no public exploit code.

Other vulnerabilities in Phoenix Contact CHARX SEC-3000

• CVE-2025-25270 Remote Code Execution via Unauthenticated Configuration Manipulation Critical 9.8
• CVE-2024-25995 PHOENIX CONTACT: Remote code execution in CHARX Series Critical 9.8
• CVE-2025-25268 Unauthenticated Configuration Access via Exposed API Endpoint High 8.8
• CVE-2025-25271 OCPP Backend Configuration via Insecure Defaults High 8.8
• CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series High 8.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-v2p4-fgcv-96mw.