Skip to content
OpenAdvisories
High · 8.4 CVE-2024-25999 EUVD-2024-23295GHSA-fcvq-8pj4-r94x

PHOENIX CONTACT: Privilege escalation in the OCPP agent service

Published Mar 12, 2024 · Updated Aug 1, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service. 

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT CHARX SEC-3000 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3050 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3100 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3150 ≤ 1.5.0 —

Advisories 1

References