High · 8.8 CVE-2024-11497 EUVD-2024-34375GHSA-4jf3-hxmq-5r2f

Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation

Published Jan 14, 2025 · Updated Jan 14, 2025 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access.

Affected products

Vendor	Product	Affected	Fixed
PHOENIX CONTACT	CHARX SEC-3000	< 1.7.0	1.7.0
PHOENIX CONTACT	CHARX SEC-3050	< 1.7.0	1.7.0
PHOENIX CONTACT	CHARX SEC-3100	< 1.7.0	1.7.0
PHOENIX CONTACT	CHARX SEC-3150	< 1.7.0	1.7.0

Advisories 1

VDE-2024-070 Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers CERT@VDE · May 14, 2025

References

https://cert.vde.com/en/advisories/VDE-2024-070