Description
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | CHARX SEC-3000 (1139022) | 0.0.0 – < 1.7.0 | 1.7.0 |
| Phoenix Contact | CHARX SEC-3050 (1139018) | 0.0.0 – < 1.7.0 | 1.7.0 |
| Phoenix Contact | CHARX SEC-3100 (1139012) | 0.0.0 – < 1.7.0 | 1.7.0 |
| Phoenix Contact | CHARX SEC-3150 (1139012) | 0.0.0 – < 1.7.0 | 1.7.0 |
Advisories 1
- VDE-2024-022 Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers CERT@VDE · Aug 27, 2025