Skip to contentPhoenix Contact Charx Sec-3150 vulnerabilities
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreCommand Injection in SCM (idledisconnect parameter)CVE-2026-78499.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreFirewall bypass during shutdownCVE-2026-441089.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreExposed Reboot via ModbusCVE-2026-441078.7 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreCleartext password in logsCVE-2026-441055.8 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreLocal Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website fileCVE-2026-441068.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreControllerAgent does not perform validation of firmwareCVE-2026-441049.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreJupiCore does not perform validation of firmwareCVE-2026-441036.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreOCPP Firmware download is not properly lockedCVE-2026-441026.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreOCPP reconfiguration vulnerabilityCVE-2026-441019.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreJupiCore charging point reconfiguration without authCVE-2026-441008.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreLocal Privilege Escalation via pppd password injectionCVE-2026-440998.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreOS Command Injection in OCPP Agent via charge_box_idCVE-2026-440988.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreFile Upload vulnerabilityCVE-2026-440975.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreudhcpc Privilege EscalationCVE-2026-440968.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreLocal Privilege Escalation via Network scriptsCVE-2026-440958.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreFallback to second RAUC slot with default credentialsCVE-2026-440948.3 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreLocal Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start scriptCVE-2026-440938.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreMissing input validation / stripping of CRLF characters in SystemConfigManagerCVE-2026-440928.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreCreation of a new configuration by posting a malicious ID to MQTTCVE-2026-440918.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreMissing authentication for MQTT BrokerCVE-2026-440909.3 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 morePhoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllersCVE-2026-410327.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 morePhoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllersCVE-2025-416998.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreOCPP Backend Configuration via Insecure DefaultsCVE-2025-252718.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreRemote Code Execution via Unauthenticated Configuration ManipulationCVE-2025-252709.8 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Unauthenticated Command InjectionCVE-2025-252698.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUnauthenticated Configuration Access via Exposed API EndpointCVE-2025-252688.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePrivilege Escalation via Insecure SSH PermissionsCVE-2025-240067.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Vulnerable SSH ScriptCVE-2025-240057.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUSB-C Buffer Overflow via Display Interface in EV Charging StationsCVE-2025-240045.2 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging StationsCVE-2025-240038.2 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT DoS Vulnerability in German EV Charging StationsCVE-2025-240025.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 morePhoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalationCVE-2024-114978.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +6 more +8 morePhoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordCVE-2024-67888.6 High
- phoenix contact charx sec-3000 (1139022), charx sec-3050 (1139018), charx sec-3100 (1139012) +9 more +11 morePhoenix Contact: Start sequence allows attack during the boot processCVE-2024-39135.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX SeriesCVE-2024-281377.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: command injection gains root privileges using the OCPP remote serviceCVE-2024-281367.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: command injection vulnerability in the API of the CHARX SeriesCVE-2024-281355.0 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX SeriesCVE-2024-281347.0 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Privilege escalation in CHARX SeriesCVE-2024-281337.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Lack of SSL support in CHARX SeriesCVE-2024-262888.7 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesCVE-2024-260054.8 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX SeriesCVE-2024-260047.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of the control agent in CHARX SeriesCVE-2024-260037.5 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: File ownership manipulation in CHARX SeriesCVE-2024-260027.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Out of bounds write only memory accessCVE-2024-260017.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Out of bounds read only memory accessCVE-2024-260005.9 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege escalation in the OCPP agent serviceCVE-2024-259998.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Command injection in the OCPP ServiceCVE-2024-259987.3 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Log injection in CHARX SeriesCVE-2024-259975.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX SeriesCVE-2024-259965.3 Medium
- Show moreLoading…