Description
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CHARX SEC-3000 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3050 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3100 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3150 | ≤ 1.5.0 | — |
Advisories 1
- VDE-2024-011 PHOENIX CONTACT: Multiple vulnerabilities in CHARX SEC charge controllers CERT@VDE · Mar 12, 2024