Description
A local attacker with low privileges can use a command injection vulnerability to gain root
privileges due to improper input validation using the OCPP Remote service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHOENIX CONTACT | CHARX SEC-3000 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3050 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3100 | ≤ 1.5.1 | — |
| PHOENIX CONTACT | CHARX SEC-3150 | ≤ 1.5.1 | — |