CVE-2025-31930: Siemens Iec 1ph 7.4kw Child Socket

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket (8EM1310-2EH04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket incl. SIM (8EM1310-2EH04-3GA2) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter (8EM1310-2EN04-3GA1) (All versions < V2.135), IEC 1Ph 7.4kW Parent socket/ shutter SIM (8EM1310-2EN04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Child cable 7m (8EM1310-3EJ04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket (8EM1310-3EH04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Child socket/ shutter (8EM1310-3EN04-0GA0) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m (8EM1310-3EJ04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent cable 7m incl. SIM (8EM1310-3EJ04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket (8EM1310-3EH04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket incl. SIM (8EM1310-3EH04-3GA2) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter (8EM1310-3EN04-3GA1) (All versions < V2.135), IEC 3Ph 22kW Parent socket/ shutter SIM (8EM1310-3EN04-3GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Child cable 7m (8EM1310-3FJ04-0GA2) (All versions < V2.135), IEC ERK 3Ph 22 kW Child socket (8EM1310-3FH04-0GA0) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket (8EM1310-3FH04-3GA1) (All versions < V2.135), IEC ERK 3Ph 22 kW Parent socket incl. SI (8EM1310-3FH04-3GA2) (All versions < V2.135), UL Commercial Cellular 48A NTEP (8EM1310-5HF14-1GA2) (All versions < V2.135), UL Commercial Child 40A w/ 15118 HW (8EM1310-4CF14-0GA0) (All versions < V2.135), UL Commercial Child 48A BA Compliant (8EM1315-5CG14-0GA0) (All versions < V2.135), UL Commercial Child 48A w/ 15118 HW (8EM1310-5CF14-0GA0) (All versions < V2.135), UL Commercial Parent 40A with Simcard (8EM1310-4CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A (USPS) (8EM1317-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A BA Compliant (8EM1315-5CG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A with Simcard BA (8EM1310-5CF14-1GA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1310-5CG14-1GA1) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1314-5CG14-2FA2) (All versions < V2.135), UL Commercial Parent 48A, 15118, 25ft (8EM1315-5HG14-1GA2) (All versions < V2.135), UL Commercial Parent 48A,15118 25ft Sim (8EM1310-5CG14-1GA2) (All versions < V2.135), VersiCharge Blue™ 80A AC Cellular (8EM1315-7BG16-1FH2) (All versions < V2.135). Affected devices contain Modbus service enabled by default. This could allow an attacker connected to the same network to remotely control the EV charger.

Affected products

Siemens Iec 1ph 7.4kw Child Socket: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Child Socket/ Shutter: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Cable 7m: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Cable 7m Incl. Sim: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Socket: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Socket/ Shutter: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Socket/ Shutter Sim: before V2.135 (fixed in V2.135)
Siemens Iec 1ph 7.4kw Parent Socket Incl. Sim: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Child Cable 7m: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Child Socket: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Child Socket/ Shutter: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Cable 7m: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Cable 7m Incl. Sim: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Socket: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Socket/ Shutter: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Socket/ Shutter Sim: before V2.135 (fixed in V2.135)
Siemens Iec 3ph 22kw Parent Socket Incl. Sim: before V2.135 (fixed in V2.135)
Siemens Iec Erk 3ph 22 Kw Child Cable 7m: before V2.135 (fixed in V2.135)
Siemens Iec Erk 3ph 22 Kw Child Socket: before V2.135 (fixed in V2.135)
Siemens Iec Erk 3ph 22 Kw Parent Socket: before V2.135 (fixed in V2.135)
Siemens Iec Erk 3ph 22 Kw Parent Socket Incl. Si: before V2.135 (fixed in V2.135)
Siemens Ul Commercial Cellular 48a Ntep: before V2.135 (fixed in V2.135)
Siemens Ul Commercial Child 40a W/ 15118 Hw: before V2.135 (fixed in V2.135)
Siemens Ul Commercial Child 48a BA Compliant: before V2.135 (fixed in V2.135)
Siemens Ul Commercial Child 48a W/ 15118 Hw: before V2.135 (fixed in V2.135)
and 7 more

Published 2025-05-13. Last modified 2026-06-17.