PT-2026-24216 · Siemens · Heliox Flex 180 Kw Ev Charging Station+1

Published 2026-03-10 · Updated 2026-04-15 · CVE-2025-27769

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Heliox Flex 180 kW EV Charging Station versions prior to F4.11.1 Heliox Mobile DC 40 kW EV Charging Station versions prior to L4.10.1

Description The charging stations have improper access control. This could allow an attacker to reach unauthorized services via the charging cable.

Recommendations Update Heliox Flex 180 kW EV Charging Station to version F4.11.1 or later. Update Heliox Mobile DC 40 kW EV Charging Station to version L4.10.1 or later.

Fix

Weakness Enumeration

CWE-923

Related Identifiers

CVE-2025-27769

Affected Products

Heliox Flex 180 Kw Ev Charging Station

Heliox Mobile Dc 40 Kw Ev Charging Station

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-27769 · Security Note
• https://twitter.com/SecurityAr58409/status/2044237242508394635 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-126399.html · Note
• https://twitter.com/CVEnew/status/2034520444456321530 · Twitter Post