Is CVE-2025-27769 actively exploited?

No active exploitation of CVE-2025-27769 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-27769 be exploited remotely?

No. CVE-2025-27769 requires physical access to exploit.

What is the CVSS score of CVE-2025-27769?

CVE-2025-27769 has a CVSS score of 2.6 (LOW).

HOME VULNERABILITIESCVE-2025-27769

LOW

CVE-2025-27769

CWE-923Published: March 10, 2026· Updated: Mar 11, 2026

2.6

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:2.5th

Official Description

A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC 40 kW EV Charging Station (All versions < L4.10.1). Affected devices contain improper access control that could allow an attacker to reach unauthorized services via the charging cable.

NVD Source

Technical Analysis

CVE-2025-27769 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorPhysical

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeChanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

News & Research Mentioning CVE-2025-27769

Siemens Heliox EV Chargers

CISA Alerts· Mar 12, 2026

View CSAF Summary Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Heliox EV Chargers are affected: Heliox Flex 180 kW EV Charging Station Heliox Mobile DC 40 kW EV Charging Station CVSS Vendor Equipment Vulnerabilities v3 2.6 Siemens Siemens Heliox EV Chargers Improper Restriction of Communication Channel to Intended Endpoints Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE [xlite_meta score:73 src:CISA Alerts xlite_fp:999cd366f823b90181859e9b13251fd26e563dd87d984dfde07b6b9b072a4966]