Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-25997 EUVD-2024-23293GHSA-4jrv-4q68-p994

PHOENIX CONTACT: Log injection in CHARX Series

Published Mar 12, 2024 · Updated Aug 1, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT CHARX SEC-3000 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3050 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3100 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3150 ≤ 1.5.0 —

Advisories 1

References