Description
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CHARX SEC-3000 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3050 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3100 | ≤ 1.5.0 | — |
| PHOENIX CONTACT | CHARX SEC-3150 | ≤ 1.5.0 | — |
Advisories 1
- VDE-2024-011 PHOENIX CONTACT: Multiple vulnerabilities in CHARX SEC charge controllers CERT@VDE · Mar 12, 2024