Description
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CHARX SEC-3000 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3050 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3100 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3150 | ≤ 1.5.0 | — |
Advisories 1
- VDE-2024-011 PHOENIX CONTACT: Multiple vulnerabilities in CHARX SEC charge controllers CERT@VDE · Mar 12, 2024
References
- https://cert.vde.com/en/advisories/VDE-2024-011 vendor-advisory
- https://www.zerodayinitiative.com/advisories/ZDI-24-856/ third-party-advisory