CVE-2025-31945

Description

References

• cisa.gov/news-events/ics-advisories/icsa-25-105-04 · Mitigation

Weitere Schwachstellen in cloud portal

• CVE-2025-31950MITTEL 5.3An unauthenticated attacker can obtain EV charger energy consumption information of other users.
• CVE-2025-31654MITTEL 5.3An attacker can get information about the groups of the smart home devices for arbitrary users (i.e., "rooms").
• CVE-2025-31360HOCH 7.5Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users.
• CVE-2025-31147MITTEL 5.3Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users.
• CVE-2025-30512MITTEL 6.5Unauthenticated attackers can send configuration settings to device and possible perform physical actions remotely (e.g., on/off).