What’s Vulnerable › Products
Phoenixcontact Charx Sec-3100 Firmware vulnerabilities
29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your Phoenixcontact Charx Sec-3100 Firmware version is affected
Latest Phoenixcontact Charx Sec-3100 Firmware vulnerabilities
- CVE-2025-25271 — OCPP Backend Configuration via Insecure Defaults (CVSS 8.8)
- CVE-2025-25270 — Remote Code Execution via Unauthenticated Configuration Manipulation (CVSS 9.8)
- CVE-2025-25269 — Local Privilege Escalation via Unauthenticated Command Injection (CVSS 8.4)
- CVE-2025-25268 — Unauthenticated Configuration Access via Exposed API Endpoint (CVSS 8.8)
- CVE-2025-24006 — Privilege Escalation via Insecure SSH Permissions (CVSS 7.8)
- CVE-2025-24005 — Local Privilege Escalation via Vulnerable SSH Script (CVSS 7.8)
- CVE-2025-24004 — USB-C Buffer Overflow via Display Interface in EV Charging Stations (CVSS 5.2)
- CVE-2025-24003 — MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations (CVSS 8.2)
- CVE-2025-24002 — MQTT DoS Vulnerability in German EV Charging Stations (CVSS 5.3)
- CVE-2024-6788 — Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password (CVSS 9.8)
- CVE-2024-3913 — Phoenix Contact: Start sequence allows attack during the boot process (CVSS 5.9)
- CVE-2024-28137 — PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series (CVSS 7.8)
- CVE-2024-28136 — PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service (CVSS 7.8)
- CVE-2024-28135 — PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series (CVSS 5.0)
- CVE-2024-28134 — PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series (CVSS 7.0)
- CVE-2024-28133 — PHOENIX CONTACT: Privilege escalation in CHARX Series (CVSS 7.8)
- CVE-2024-26288 — PHOENIX CONTACT: Lack of SSL support in CHARX Series (CVSS 8.7)
- CVE-2024-26005 — PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series (CVSS 4.8)
- CVE-2024-26004 — PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series (CVSS 7.5)
- CVE-2024-26003 — PHOENIX CONTACT: DoS of the control agent in CHARX Series (CVSS 7.5)
- CVE-2024-26002 — PHOENIX CONTACT: File ownership manipulation in CHARX Series (CVSS 7.8)
- CVE-2024-26001 — PHOENIX CONTACT: Out of bounds write only memory access (CVSS 9.8)
- CVE-2024-26000 — PHOENIX CONTACT: Out of bounds read only memory access (CVSS 7.5)
- CVE-2024-25999 — PHOENIX CONTACT: Privilege escalation in the OCPP agent service (CVSS 7.8)
- CVE-2024-25998 — PHOENIX CONTACT: Command injection in the OCPP Service (CVSS 7.3)