Description
A low privileged remote attacker can use a command injection vulnerability in the API which performs
remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CHARX SEC-3000 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3050 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3100 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3150 | ≤ 1.5.1 | — |