Description
A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phoenix Contact | CHARX SEC-3150 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3100 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3050 | 0.0.0 – ≤ 1.6.5 | — |
| Phoenix Contact | CHARX SEC-3000 | 0.0.0 – ≤ 1.6.5 | — |
Advisories 1
- VDE-2025-014 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers CERT@VDE · Jul 8, 2025