What’s Vulnerable › Products
Phoenix Contact CHARX SEC-3000 vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.
Check whether your Phoenix Contact CHARX SEC-3000 version is affected
Latest Phoenix Contact CHARX SEC-3000 vulnerabilities
- CVE-2026-7849 — Command Injection in SCM (idledisconnect parameter) (CVSS 9.8)
- CVE-2026-44108 — Firewall bypass during shutdown (CVSS 9.8)
- CVE-2026-44107 — Exposed Reboot via Modbus (CVSS 7.5)
- CVE-2026-44106 — Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file (CVSS 7.8)
- CVE-2026-44105 — Cleartext password in logs (CVSS 6.6)
- CVE-2026-44104 — ControllerAgent does not perform validation of firmware (CVSS 9.8)
- CVE-2026-44103 — JupiCore does not perform validation of firmware (CVSS 5.3)
- CVE-2026-44102 — OCPP Firmware download is not properly locked (CVSS 5.3)
- CVE-2026-44101 — OCPP reconfiguration vulnerability (CVSS 9.8)
- CVE-2026-44100 — JupiCore charging point reconfiguration without auth (CVSS 9.4)
- CVE-2026-44099 — Local Privilege Escalation via pppd password injection (CVSS 7.8)
- CVE-2026-44098 — OS Command Injection in OCPP Agent via charge_box_id (CVSS 8.6)
- CVE-2026-44097 — File Upload vulnerability (CVSS 7.1)
- CVE-2026-44096 — udhcpc Privilege Escalation (CVSS 7.8)
- CVE-2026-44095 — Local Privilege Escalation via Network scripts (CVSS 7.8)
- CVE-2026-44094 — Fallback to second RAUC slot with default credentials (CVSS 8.6)
- CVE-2026-44093 — Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script (CVSS 7.8)
- CVE-2026-44092 — Missing input validation / stripping of CRLF characters in SystemConfigManager (CVSS 9.1)
- CVE-2026-44091 — Creation of a new configuration by posting a malicious ID to MQTT (CVSS 9.1)
- CVE-2026-44090 — Missing authentication for MQTT Broker (CVSS 9.8)
- CVE-2026-41032 — Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers (CVSS 7.5)
- CVE-2025-41699 — Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers (CVSS 8.8)
- CVE-2024-11497 — Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation (CVSS 8.8)