{"id":"CVE-2025-12357","state":"PUBLISHED","title":"International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints","description":"By manipulating the Signal Level Attenuation Characterization (SLAC) \nprotocol with spoofed measurements, an attacker can stage a \nman-in-the-middle attack between an electric vehicle and chargers that \ncomply with the ISO 15118-2 part. This vulnerability may be exploitable \nwirelessly, within close proximity, via electromagnetic induction.","publishedAt":"2025-10-31T15:33:48.343Z","updatedAt":"2026-03-18T20:07:29.329Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"icscert"},"assigner":"icscert","products":["ISO 15118-2 Network and Application Protocol Requirements EV Car Chargers"],"affected":[{"vendor":"ISO 15118-2 Network and Application Protocol Requirements","product":"EV Car Chargers","defaultStatus":"unaffected","versions":[{"version":"Part 15118-2 Network and Application Protocol Requirements","status":"affected"}]}],"references":["https://www.iec.ch/contact?id=40499","https://www.cisa.gov/news-events/ics-advisories/icsa-25-303-01","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-303-01.json"],"weaknesses":["CWE-923"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/12xxx/CVE-2025-12357.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-12357","state":"PUBLISHED","datePublished":"2025-10-31T15:33:48.343Z","dateUpdated":"2026-03-18T20:07:29.329Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2025-10-27T16:05:18.413Z"},"containers":{"cna":{"title":"International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints","descriptions":[{"lang":"en","value":"By manipulating the Signal Level Attenuation Characterization (SLAC) \nprotocol with spoofed measurements, an attacker can stage a \nman-in-the-middle attack between an electric vehicle and chargers that \ncomply with the ISO 15118-2 part. This vulnerability may be exploitable \nwirelessly, within close proximity, via electromagnetic induction."}],"affected":[{"vendor":"ISO 15118-2 Network and Application Protocol Requirements","product":"EV Car Chargers","defaultStatus":"unaffected","versions":[{"version":"Part 15118-2 Network and Application Protocol Requirements","status":"affected"}]}],"references":[{"url":"https://www.iec.ch/contact?id=40499"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-303-01"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-303-01.json"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":6.3,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}},{"other":{"type":"ssvc","content":{"options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CNA","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-923","lang":"en","description":"CWE-923","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2026-03-17T16:05:30.393Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:iso_15118-2_network_and_application_protocol_requirements:ev_car_chargers:part_15118-2_network_and_application_protocol_requirements:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"workarounds":[{"lang":"en","value":"ISO recommends using TLS for all communications in accordance with \nISO 15118-20. While the use of TLS is recommended in ISO 15118-2, it is \nrequired in the ISO 15118-20 revision. TLS should be implemented with \ncertificate chaining.\n\nFor additional information, please contact the International Electrotechnical Commission https://www.iec.ch/contact .","supportingMedia":[{"type":"text/html","base64":false,"value":"

ISO recommends using TLS for all communications in accordance with \nISO 15118-20. While the use of TLS is recommended in ISO 15118-2, it is \nrequired in the ISO 15118-20 revision. TLS should be implemented with \ncertificate chaining.

For additional information, please contact the International Electrotechnical Commission.\n\n

"}]}],"credits":[{"lang":"en","value":"Mark I. Johnson of Southwest Research Institute reported this vulnerability to CISA.","type":"finder"},{"lang":"en","value":"Sébastien Dudek of Penthertz disclosed this vulnerability publicly.","type":"finder"},{"lang":"en","value":"Jean-Christophe Delaunay and Vincent Fargues of Synacktiv disclosed this vulnerability publicly.","type":"finder"}],"source":{"advisory":"ICSA-25-303-01","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.4.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-18T20:07:24.050954Z","id":"CVE-2025-12357","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-18T20:07:29.329Z"}}]}}}