Skip to content
Fencer Vulns
high 8.8

CVE-2025-31930 json

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/…

published 2025-05-13 17 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-14719

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 21%
public exploits
0
none known

Summary

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions < V2.135), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions < V2.135), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions < V2.135), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions < V2.135), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions < V2.135), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions < V2.135), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions < V2.135). Affected devices contain Modbus service enabled by default. This could allow an attacker connected to the same network to remotely control the EV charger.

Patch / fix

  • Siemens IEC 1Ph 7.4kW Child socket V2.135
  • Siemens IEC 1Ph 7.4kW Child socket/ shutter V2.135
  • Siemens IEC 1Ph 7.4kW Parent cable 7m V2.135
  • Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM V2.135
  • Siemens IEC 1Ph 7.4kW Parent socket V2.135
  • Siemens IEC 1Ph 7.4kW Parent socket incl. SIM V2.135
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter V2.135
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM V2.135
  • Siemens IEC 3Ph 22kW Child cable 7m V2.135
  • Siemens IEC 3Ph 22kW Child socket V2.135
  • Siemens IEC 3Ph 22kW Child socket/ shutter V2.135
  • Siemens IEC 3Ph 22kW Parent cable 7m V2.135
  • Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM V2.135
  • Siemens IEC 3Ph 22kW Parent socket V2.135
  • Siemens IEC 3Ph 22kW Parent socket incl. SIM V2.135
  • Siemens IEC 3Ph 22kW Parent socket/ shutter V2.135
  • Siemens IEC 3Ph 22kW Parent socket/ shutter SIM V2.135
  • Siemens IEC ERK 3Ph 22 kW Child cable 7m V2.135
  • Siemens IEC ERK 3Ph 22 kW Child socket V2.135
  • Siemens IEC ERK 3Ph 22 kW Parent socket V2.135
  • Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI V2.135
  • Siemens UL Commercial Cellular 48A NTEP V2.135
  • Siemens UL Commercial Child 40A w/ 15118 HW V2.135
  • Siemens UL Commercial Child 48A BA Compliant V2.135
  • Siemens UL Commercial Child 48A w/ 15118 HW V2.135
  • Siemens UL Commercial Parent 40A with Simcard V2.135
  • Siemens UL Commercial Parent 48A (USPS) V2.135
  • Siemens UL Commercial Parent 48A BA Compliant V2.135
  • Siemens UL Commercial Parent 48A with Simcard BA V2.135
  • Siemens UL Commercial Parent 48A, 15118, 25ft V2.135

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-135-08 updated cvss 8.8

Siemens VersiCharge AC Series EV Chargers

  • Siemens IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) < V2.135 Siemens IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) < V2.135 Siemens IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) < V2.135 Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) < V2.135 Siemens IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) < V2.135 Siemens IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) < V2.135
    +30 more products
    Siemens IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) < V2.135 Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) < V2.135 Siemens IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) < V2.135 Siemens IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) < V2.135 Siemens IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) < V2.135 Siemens IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) < V2.135 Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) < V2.135 Siemens IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) < V2.135 Siemens IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) < V2.135 Siemens IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) < V2.135 Siemens IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) < V2.135 Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) < V2.135 Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) < V2.135 Siemens IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) < V2.135 Siemens IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) < V2.135 Siemens IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) < V2.135 Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) < V2.135 Siemens UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) < V2.135 Siemens UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) < V2.135 Siemens UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) < V2.135 Siemens UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) < V2.135 Siemens UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) < V2.135 Siemens UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) < V2.135 Siemens UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) < V2.135 Siemens UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) < V2.135 Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) < V2.135 Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) < V2.135 Siemens UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) < V2.135 Siemens UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) < V2.135 Siemens VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) < V2.135
    affected: fixed in V2.135

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
17 mo ago

Exploit prediction

0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 4.0 8.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N
CNA 4.0 8.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens IEC 1Ph 7.4kW Child socket
  • Siemens IEC 1Ph 7.4kW Child socket/ shutter
  • Siemens IEC 1Ph 7.4kW Parent cable 7m
  • Siemens IEC 1Ph 7.4kW Parent cable 7m incl. SIM
  • Siemens IEC 1Ph 7.4kW Parent socket
  • Siemens IEC 1Ph 7.4kW Parent socket incl. SIM
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter
  • Siemens IEC 1Ph 7.4kW Parent socket/ shutter SIM
  • Siemens IEC 3Ph 22kW Child cable 7m
  • Siemens IEC 3Ph 22kW Child socket
  • Siemens IEC 3Ph 22kW Child socket/ shutter
  • Siemens IEC 3Ph 22kW Parent cable 7m
  • Siemens IEC 3Ph 22kW Parent cable 7m incl. SIM
  • Siemens IEC 3Ph 22kW Parent socket
  • Siemens IEC 3Ph 22kW Parent socket incl. SIM
  • Siemens IEC 3Ph 22kW Parent socket/ shutter
  • Siemens IEC 3Ph 22kW Parent socket/ shutter SIM
  • Siemens IEC ERK 3Ph 22 kW Child cable 7m
  • Siemens IEC ERK 3Ph 22 kW Child socket
  • Siemens IEC ERK 3Ph 22 kW Parent socket
  • Siemens IEC ERK 3Ph 22 kW Parent socket incl. SI
  • Siemens UL Commercial Cellular 48A NTEP
  • Siemens UL Commercial Child 40A w/ 15118 HW
  • Siemens UL Commercial Child 48A BA Compliant
  • Siemens UL Commercial Child 48A w/ 15118 HW
  • Siemens UL Commercial Parent 40A with Simcard
  • Siemens UL Commercial Parent 48A (USPS)
  • Siemens UL Commercial Parent 48A BA Compliant
  • Siemens UL Commercial Parent 48A with Simcard BA
  • Siemens UL Commercial Parent 48A, 15118, 25ft
  • Siemens UL Commercial Parent 48A,15118 25ft Sim
  • Siemens VersiCharge Blue™ 80A AC Cellular

Classification

Weakness
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.