A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0)…
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions < V2.135), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions < V2.135), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions < V2.135), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions < V2.135), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions < V2.135), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions < V2.135), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions < V2.135). Affected devices contain Modbus service enabled by default. This could allow an attacker connected to the same network to remotely control the EV charger.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | IEC 1Ph 7.4kW Child socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Child socket/ shutter | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent cable 7m incl. SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket incl. SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket/ shutter | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 1Ph 7.4kW Parent socket/ shutter SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Child cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Child socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Child socket/ shutter | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent cable 7m incl. SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent socket incl. SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent socket/ shutter | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC 3Ph 22kW Parent socket/ shutter SIM | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child cable 7m | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Child socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Parent socket | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | IEC ERK 3Ph 22 kW Parent socket incl. SI | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Cellular 48A NTEP | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Child 40A w/ 15118 HW | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Child 48A BA Compliant | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Child 48A w/ 15118 HW | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 40A with Simcard | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A (USPS) | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A BA Compliant | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A with Simcard BA | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A, 15118, 25ft | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | UL Commercial Parent 48A,15118 25ft Sim | before V2.135 | V2.135 | Patch available | CNA |
| Siemens | VersiCharge Blue™ 80A AC Cellular | before V2.135 | V2.135 | Patch available | CNA |
- IEC 1Ph 7.4kW Child socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Child socket/ shutter VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent cable 7m incl. SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent socket incl. SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent socket/ shutter VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 1Ph 7.4kW Parent socket/ shutter SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Child cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Child socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Child socket/ shutter VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent cable 7m incl. SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent socket incl. SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent socket/ shutter VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC 3Ph 22kW Parent socket/ shutter SIM VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Child cable 7m VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Child socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Parent socket VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- IEC ERK 3Ph 22 kW Parent socket incl. SI VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Cellular 48A NTEP VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Child 40A w/ 15118 HW VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Child 48A BA Compliant VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Child 48A w/ 15118 HW VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 40A with Simcard VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A (USPS) VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A BA Compliant VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A with Simcard BA VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A, 15118, 25ft VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- UL Commercial Parent 48A,15118 25ft Sim VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
- VersiCharge Blue™ 80A AC Cellular VendorSiemens Affected before V2.135 Fixed in V2.135 Patch available CNA
Remediation
- Fix · CNA IEC 1Ph 7.4kW Child socket (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Child socket/ shutter (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent cable 7m incl. SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent socket (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent socket incl. SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent socket/ shutter (Siemens) Fixed in V2.135
- Fix · CNA IEC 1Ph 7.4kW Parent socket/ shutter SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Child cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Child socket (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Child socket/ shutter (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent cable 7m incl. SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent socket (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent socket incl. SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent socket/ shutter (Siemens) Fixed in V2.135
- Fix · CNA IEC 3Ph 22kW Parent socket/ shutter SIM (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Child cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Child cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Child cable 7m (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Child socket (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Parent socket (Siemens) Fixed in V2.135
- Fix · CNA IEC ERK 3Ph 22 kW Parent socket incl. SI (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Cellular 48A NTEP (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Child 40A w/ 15118 HW (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Child 48A BA Compliant (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Child 48A w/ 15118 HW (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 40A with Simcard (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A (USPS) (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A BA Compliant (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A with Simcard BA (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A, 15118, 25ft (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A, 15118, 25ft (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A, 15118, 25ft (Siemens) Fixed in V2.135
- Fix · CNA UL Commercial Parent 48A,15118 25ft Sim (Siemens) Fixed in V2.135
- Fix · CNA VersiCharge Blue™ 80A AC Cellular (Siemens) Fixed in V2.135
Timeline
- 2026-10-02 Threatist record created from CVE-2025-31930
- 2026-10-03 Alias added: GHSA-jqfw-j9gv-q6cp
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2025-31930 · CVE Program
- CVE-2025-31930 · NVD
- FIRST EPSS
- GHSA-jqfw-j9gv-q6cp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences