Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-26005 EUVD-2024-23301GHSA-q8c5-864c-fvvv

PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series

Published Mar 12, 2024 · Updated Aug 1, 2024 · Assigned by CERTVDE

Vendor: Phoenix Contact Product: CHARX SEC-3000 Product: CHARX SEC-3050 Product: CHARX SEC-3100 Product: CHARX SEC-3150 Category: ICS / OT

Description

An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS. 

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT CHARX SEC-3000 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3050 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3100 ≤ 1.5.0 —
PHOENIX CONTACT CHARX SEC-3150 ≤ 1.5.0 —

Advisories 1

References