Skip to content
OpenAdvisories
High · 7.8 CVE-2024-28133 EUVD-2024-25280GHSA-j4qc-xg6g-j9fh

PHOENIX CONTACT: Privilege escalation in CHARX Series

Published May 14, 2024 · Updated Aug 2, 2024 · Assigned by CERTVDE

Description

A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root
privileges. 

Affected products

VendorProductAffectedFixed
PHOENIX CONTACT CHARX SEC-3000 ≤ 1.5.1 —
PHOENIX CONTACT CHARX SEC-3050 ≤ 1.5.1 —
PHOENIX CONTACT CHARX SEC-3100 ≤ 1.5.1 —
PHOENIX CONTACT CHARX SEC-3150 ≤ 1.5.1 —

Advisories 1

References