Skip to content
Fencer Vulns
medium 4.2

CVE-2025-31929 json

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter…

published 2025-05-13 17 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-14720

cvss
4.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 10%
public exploits
0
none known

Summary

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-135-08 updated cvss 4.2

Siemens VersiCharge AC Series EV Chargers

  • Siemens IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) Siemens IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) Siemens IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) Siemens IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) Siemens IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2)
    +32 more products
    Siemens IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) Siemens IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) Siemens IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) Siemens IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) Siemens IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) Siemens IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) Siemens IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) Siemens IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) Siemens IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) Siemens IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) Siemens IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) Siemens UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) Siemens UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) Siemens UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) Siemens UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) Siemens UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) Siemens UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) Siemens UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) Siemens UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) Siemens UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) Siemens UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) Siemens UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) Siemens VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2)
    affected: no fix planned

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
17 mo ago

Exploit prediction

0.20% chance of exploitation in the next 30 days, higher than 10% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CNA 4.0 4.1 CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CNA 4.0 4.1 CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens IEC 1Ph 7.4kW Child socket
  • Siemens IEC 1Ph 7.4kW Child socket/ shutter
  • Siemens IEC 1Ph 7.4kW Parent cable 7m
  • Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM
  • Siemens IEC 1Ph 7.4kW Parent socket
  • Siemens IEC 1Ph 7.4kW Parent socket incl. SIM
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM
  • Siemens IEC 3Ph 22kW Child cable 7m
  • Siemens IEC 3Ph 22kW Child socket
  • Siemens IEC 3Ph 22kW Child socket/ shutter
  • Siemens IEC 3Ph 22kW Parent cable 7m
  • Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM
  • Siemens IEC 3Ph 22kW Parent socket
  • Siemens IEC 3Ph 22kW Parent socket incl. SIM
  • Siemens IEC 3Ph 22kW Parent socket/ shutter
  • Siemens IEC 3Ph 22kW Parent socket/ shutter SIM
  • Siemens IEC ERK 3Ph 22 kW Child cable 7m
  • Siemens IEC ERK 3Ph 22 kW Child socket
  • Siemens IEC ERK 3Ph 22 kW Parent socket
  • Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI
  • Siemens UL Commercial Cellular 48A NTEP
  • Siemens UL Commercial Child 40A w/ 15118 HW
  • Siemens UL Commercial Child 48A BA Compliant
  • Siemens UL Commercial Child 48A w/ 15118 HW
  • Siemens UL Commercial Parent 40A with Simcard
  • Siemens UL Commercial Parent 48A (USPS)
  • Siemens UL Commercial Parent 48A BA Compliant
  • Siemens UL Commercial Parent 48A with Simcard BA
  • Siemens UL Commercial Parent 48A, 15118, 25ft
  • Siemens UL Commercial Parent 48A,15118 25ft Sim
  • Siemens UL Resi High End 40A w/15118 Hw
  • Siemens UL Resi High End 48A w/15118 Hw
  • Siemens VersiCharge Blue™ 80A AC Cellular

Classification

Weakness
  • CWE-1326 Missing Immutable Root of Trust in Hardware

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.