Phoenix Contact Charx SEC 3150 vulnerabilities, page 3
51 vulnerabilities
Known vulnerabilities in Phoenix Contact Charx SEC 3150, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-44101phoenix contactcharx sec-3000+3
EPSS score0.75%
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker.CVE-2026-44090phoenix contactcharx sec-3000+3EPSS score0.75%
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised.CVE-2026-44104phoenix contactcharx sec-3000+3EPSS score0.41%
The firmware update process for the basemodule of the charging controller only validates the
CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.CVE-2026-44102phoenix contactcharx sec-3000+3EPSS score0.34%
An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid firmware file. This will cause the file to remain accessible for a short period before it is deleted due to improper locking during the cleanup process.CVE-2026-44107phoenix contactcharx sec-3000+3EPSS score0.56%
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.CVE-2026-44091phoenix contactcharx sec-3000+3EPSS score0.59%
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.CVE-2026-44106phoenix contactcharx sec-3000+3EPSS score0.19%
A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.CVE-2026-44093phoenix contactcharx sec-3000+3EPSS score0.19%
A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.CVE-2026-44099phoenix contactcharx sec-3000+3EPSS score0.19%
A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.CVE-2026-44092phoenix contactcharx sec-3000+3EPSS score0.68%
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.CVE-2026-44096phoenix contactcharx sec-3000+3EPSS score0.19%
A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise.