charx sec-3100 firmware vulnerabilities and fixes

Recent CVEs affecting charx sec-3100 firmware, with upgrade or downgrade steps. 9 tracked.

Also searched as: charx sec 3100 firmware, charxsec-3100firmware.

charx sec-3100 firmware has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-07-08. Highest priority: CVE-2025-25270 (score 53/100).

• CVE-2025-25271 HIGH 8.8 UPGRADE UPGRADE An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the
• CVE-2025-25270 CRITICAL 9.8 UPGRADE UPGRADE An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as
• CVE-2025-25269 HIGH 8.4 UPGRADE UPGRADE An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a pri
• CVE-2025-25268 HIGH 8.8 UPGRADE UPGRADE An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint
• CVE-2025-24006 HIGH 7.8 UPGRADE UPGRADE A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate
• CVE-2025-24005 HIGH 7.8 UPGRADE UPGRADE A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to
• CVE-2025-24004 MEDIUM 5.2 UPGRADE UPGRADE A physical attacker with access to the device display via USB-C can send a message to the device which trigger
• CVE-2025-24003 HIGH 8.2 UPGRADE UPGRADE An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations
• CVE-2025-24002 MEDIUM 5.3 UPGRADE UPGRADE An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying wit

FAQ

How do I fix charx sec-3100 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is charx sec-3100 firmware being exploited right now?

None of the tracked charx sec-3100 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which charx sec-3100 firmware CVE should I patch first?

CVE-2025-25270 currently ranks highest (53/100): An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as.

RSS feed for charx sec-3100 firmware · ← Back to latest CVEs