VULNERABILITY INTELLIGENCE

CVE-2025-22368

EPSS probability0.65%
CISA KEVNot currently listed
Published2025-03-11
Last modified2026-06-17

Description

The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS.

Weakness classification

  • csirt@divd.nl: CWE-78

Primary references