Skip to content

Phoenixcontact Charx Sec-3150 Firmware vulnerabilities

phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreOCPP Backend Configuration via Insecure DefaultsCVE-2025-252718.8 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreRemote Code Execution via Unauthenticated Configuration ManipulationCVE-2025-252709.8 CriticalJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Unauthenticated Command InjectionCVE-2025-252698.4 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUnauthenticated Configuration Access via Exposed API EndpointCVE-2025-252688.8 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePrivilege Escalation via Insecure SSH PermissionsCVE-2025-240067.8 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Vulnerable SSH ScriptCVE-2025-240057.8 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUSB-C Buffer Overflow via Display Interface in EV Charging StationsCVE-2025-240045.2 MediumJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging StationsCVE-2025-240038.2 HighJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT DoS Vulnerability in German EV Charging StationsCVE-2025-240025.3 MediumJuly 8, 2025
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +6 more +8 morePhoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordCVE-2024-67888.6 HighAugust 13, 2024
phoenix contact charx sec-3000 (1139022), charx sec-3050 (1139018), charx sec-3100 (1139012) +9 more +11 morePhoenix Contact: Start sequence allows attack during the boot processCVE-2024-39135.9 MediumAugust 13, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX SeriesCVE-2024-281377.8 HighMay 14, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: command injection gains root privileges using the OCPP remote serviceCVE-2024-281367.8 HighMay 14, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: command injection vulnerability in the API of the CHARX SeriesCVE-2024-281355.0 MediumMay 14, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX SeriesCVE-2024-281347.0 HighMay 14, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Privilege escalation in CHARX SeriesCVE-2024-281337.8 HighMay 14, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Lack of SSL support in CHARX SeriesCVE-2024-262888.7 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX SeriesCVE-2024-260054.8 MediumMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX SeriesCVE-2024-260047.5 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: DoS of the control agent in CHARX SeriesCVE-2024-260037.5 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: File ownership manipulation in CHARX SeriesCVE-2024-260027.8 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Out of bounds write only memory accessCVE-2024-260017.4 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Out of bounds read only memory accessCVE-2024-260005.9 MediumMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePHOENIX CONTACT: Privilege escalation in the OCPP agent serviceCVE-2024-259998.4 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Command injection in the OCPP ServiceCVE-2024-259987.3 HighMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Log injection in CHARX SeriesCVE-2024-259975.3 MediumMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX SeriesCVE-2024-259965.3 MediumMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Remote code execution in CHARX SeriesCVE-2024-259959.8 CriticalMarch 12, 2024
phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Unintended script file upload in CHARX SeriesCVE-2024-259945.3 MediumMarch 12, 2024