PHOENIX CONTACT CHARX SEC-3150

• CVE-2026-7849 Critical 9.8 Command Injection in SCM (idledisconnect parameter) 0.8%
• CVE-2026-44108 Critical 9.8 Firewall bypass during shutdown 0.8%
• CVE-2026-44107 High 7.5 Exposed Reboot via Modbus 0.6%
• CVE-2026-44105 Medium 6.6 Cleartext password in logs 0.1%
• CVE-2026-44106 High 7.8 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file 0.2%
• CVE-2026-44104 Critical 9.8 ControllerAgent does not perform validation of firmware 0.4%
• CVE-2026-44103 Medium 5.3 JupiCore does not perform validation of firmware 0.4%
• CVE-2026-44102 Medium 5.3 OCPP Firmware download is not properly locked 0.3%
• CVE-2026-44101 Critical 9.8 OCPP reconfiguration vulnerability 0.7%
• CVE-2026-44100 Critical 9.4 JupiCore charging point reconfiguration without auth 0.5%
• CVE-2026-44099 High 7.8 Local Privilege Escalation via pppd password injection 0.2%
• CVE-2026-44098 High 8.6 OS Command Injection in OCPP Agent via charge_box_id 1.7%
• CVE-2026-44097 High 7.1 File Upload vulnerability 0.4%
• CVE-2026-44096 High 7.8 udhcpc Privilege Escalation 0.2%
• CVE-2026-44095 High 7.8 Local Privilege Escalation via Network scripts 0.2%
• CVE-2026-44094 High 8.6 Fallback to second RAUC slot with default credentials 0.5%
• CVE-2026-44093 High 7.8 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script 0.2%
• CVE-2026-44092 Critical 9.1 Missing input validation / stripping of CRLF characters in SystemConfigManager 0.7%
• CVE-2026-44091 Critical 9.1 Creation of a new configuration by posting a malicious ID to MQTT 0.6%
• CVE-2026-44090 Critical 9.8 Missing authentication for MQTT Broker 0.7%
• CVE-2026-41032 High 7.5 Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers 0.3%
• CVE-2025-41699 High 8.8 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers 0.8%
• CVE-2025-25271 High 8.8 OCPP Backend Configuration via Insecure Defaults 0.3%
• CVE-2025-25270 Critical 9.8 Remote Code Execution via Unauthenticated Configuration Manipulation 0.8%
• CVE-2025-25269 High 8.4 Local Privilege Escalation via Unauthenticated Command Injection 0.3%
• CVE-2025-25268 High 8.8 Unauthenticated Configuration Access via Exposed API Endpoint 0.4%
• CVE-2025-24006 High 7.8 Privilege Escalation via Insecure SSH Permissions 0.1%
• CVE-2025-24005 High 7.8 Local Privilege Escalation via Vulnerable SSH Script 0.1%
• CVE-2025-24004 Medium 5.2 USB-C Buffer Overflow via Display Interface in EV Charging Stations 0.2%
• CVE-2025-24003 High 8.2 MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations 0.4%
• CVE-2025-24002 Medium 5.3 MQTT DoS Vulnerability in German EV Charging Stations 0.4%
• CVE-2024-11497 High 8.8 Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation 0.4%
• CVE-2024-6788 High 8.6 Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password 0.5%
• CVE-2024-28137 High 7.8 PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series 0.3%
• CVE-2024-28136 High 7.8 PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service 0.8%
• CVE-2024-28135 Medium 5.0 PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series 1.3%
• CVE-2024-28134 High 7.0 PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series 0.5%
• CVE-2024-28133 High 7.8 PHOENIX CONTACT: Privilege escalation in CHARX Series 0.4%
• CVE-2024-26288 High 8.7 PHOENIX CONTACT: Lack of SSL support in CHARX Series 0.3%
• CVE-2024-26005 Medium 4.8 PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series 0.6%
• CVE-2024-26004 High 7.5 PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series 1.0%
• CVE-2024-26003 High 7.5 PHOENIX CONTACT: DoS of the control agent in CHARX Series 1.2%
• CVE-2024-26002 High 7.8 PHOENIX CONTACT: File ownership manipulation in CHARX Series 0.3%
• CVE-2024-26001 High 7.4 PHOENIX CONTACT: Out of bounds write only memory access 0.9%
• CVE-2024-26000 Medium 5.9 PHOENIX CONTACT: Out of bounds read only memory access 0.8%
• CVE-2024-25999 High 8.4 PHOENIX CONTACT: Privilege escalation in the OCPP agent service 0.4%
• CVE-2024-25998 High 7.3 PHOENIX CONTACT: Command injection in the OCPP Service 1.5%
• CVE-2024-25997 Medium 5.3 PHOENIX CONTACT: Log injection in CHARX Series 0.7%
• CVE-2024-25996 Medium 5.3 PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series 0.4%
• CVE-2024-25995 Critical 9.8 PHOENIX CONTACT: Remote code execution in CHARX Series 1.4%