A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0)…
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions), UL Resi High End 40A w/15118 Hw (8EM1312-4CF18-0FA3) (All versions), UL Resi High End 48A w/15118 Hw (8EM1312-5CF18-0FA3) (All versions), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions). Affected devices do not contain an Immutable Root of Trust in M0 Hardware. An attacker with physical access to the device could use this to execute arbitrary code.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | IEC 1Ph 7.4kW Child socket | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Child socket/ shutter | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent cable 7m incl. SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket incl. SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket/ shutter | all versions | — | No fix listed | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket/ shutter SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Child cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Child socket | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Child socket/ shutter | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent cable 7m incl. SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent socket | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent socket incl. SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent socket/ shutter | all versions | — | No fix listed | CNA |
| Siemens | IEC 3Ph 22kW Parent socket/ shutter SIM | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child socket | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Parent socket | all versions | — | No fix listed | CNA |
| Siemens | IEC ERK 3Ph 22 kW Parent socket incl. SI | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Cellular 48A NTEP | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Child 40A w/ 15118 HW | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Child 48A BA Compliant | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Child 48A w/ 15118 HW | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 40A with Simcard | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A (USPS) | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A BA Compliant | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A with Simcard BA | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | all versions | — | No fix listed | CNA |
| Siemens | UL Commercial Parent 48A,15118 25ft Sim | all versions | — | No fix listed | CNA |
| Siemens | UL Resi High End 40A w/15118 Hw | all versions | — | No fix listed | CNA |
| Siemens | UL Resi High End 48A w/15118 Hw | all versions | — | No fix listed | CNA |
| Siemens | VersiCharge Blue™ 80A AC Cellular | all versions | — | No fix listed | CNA |
- IEC 1Ph 7.4kW Child socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Child socket/ shutter VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent cable 7m incl. SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent socket incl. SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent socket/ shutter VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 1Ph 7.4kW Parent socket/ shutter SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Child cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Child socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Child socket/ shutter VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent cable 7m incl. SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent socket incl. SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent socket/ shutter VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC 3Ph 22kW Parent socket/ shutter SIM VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Child socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Parent socket VendorSiemens Affected all versions Fixed in — No fix listed CNA
- IEC ERK 3Ph 22 kW Parent socket incl. SI VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Cellular 48A NTEP VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Child 40A w/ 15118 HW VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Child 48A BA Compliant VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Child 48A w/ 15118 HW VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 40A with Simcard VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A (USPS) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A BA Compliant VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A with Simcard BA VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Commercial Parent 48A,15118 25ft Sim VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Resi High End 40A w/15118 Hw VendorSiemens Affected all versions Fixed in — No fix listed CNA
- UL Resi High End 48A w/15118 Hw VendorSiemens Affected all versions Fixed in — No fix listed CNA
- VersiCharge Blue™ 80A AC Cellular VendorSiemens Affected all versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-31929
- 2026-10-03 Alias added: GHSA-gfrm-qw97-m8m8
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2025-31929 · CVE Program
- CVE-2025-31929 · NVD
- FIRST EPSS
- GHSA-gfrm-qw97-m8m8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences