Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-25996 EUVD-2024-23292GHSA-jc22-rcgg-22cp

PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series

Published Mar 12, 2024 · Updated Aug 1, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT CHARX SEC-3000 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3050 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3100 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3150 ≤ 1.5.0 —

Advisories 1

References