PT-2026-24216 · Siemens · Heliox Flex 180 Kw Ev Charging Station+1

CVE-2025-27769 · Publicado 2026-03-10 · Atualizado 2026-04-15

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Baixa

Vetor base

AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Heliox Flex 180 kW EV Charging Station versions prior to F4.11.1 Heliox Mobile DC 40 kW EV Charging Station versions prior to L4.10.1

Description The charging stations have improper access control. This could allow an attacker to reach unauthorized services via the charging cable.

Recommendations Update Heliox Flex 180 kW EV Charging Station to version F4.11.1 or later. Update Heliox Mobile DC 40 kW EV Charging Station to version L4.10.1 or later.

Correção

Enumeração de Fraquezas

CWE-923

Identificadores relacionados

CVE-2025-27769

Produtos afetados

Heliox Flex 180 Kw Ev Charging Station

Heliox Mobile Dc 40 Kw Ev Charging Station

Referências · 4

• https://twitter.com/SecurityAr58409/status/2044237242508394635 · Publicação no Twitter
• https://cert-portal.siemens.com/productcert/html/ssa-126399.html · Nota
• https://twitter.com/CVEnew/status/2034520444456321530 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-27769 · Nota de Segurança