Phoenixcontact Charx Sec 3000 vulnerabilities
29 vulnerabilities
Known vulnerabilities in Phoenixcontact Charx Sec 3000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-25271phoenix contactcharx sec-3000+7
EPSS score0.35%
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.CVE-2025-25268phoenix contactcharx sec-3000+7EPSS score0.36%
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.CVE-2025-25269phoenix contactcharx sec-3000+7EPSS score0.30%
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.CVE-2025-25270phoenix contactcharx sec-3000+7EPSS score0.75%
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.CVE-2025-24003phoenix contactcharx sec-3000+7EPSS score0.40%
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.CVE-2025-24006phoenix contactcharx sec-3000+7EPSS score0.13%
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.CVE-2025-24004phoenix contactcharx sec-3000+7EPSS score0.19%
A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog.CVE-2025-24002phoenix contactcharx sec-3000+7EPSS score0.43%
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.CVE-2025-24005phoenix contactcharx sec-3000+7EPSS score0.14%
A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation.CVE-2024-26000phoenix contactcharx sec-3000+7EPSS score0.81%
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.CVE-2024-26003phoenix contactcharx sec-3000+7EPSS score1.16%
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.CVE-2024-26004phoenix contactcharx sec-3000+7EPSS score1.00%
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.CVE-2024-26002phoenix contactcharx sec-3000+7EPSS score0.26%
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.CVE-2024-26005phoenix contactcharx sec-3000+7EPSS score0.62%
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.CVE-2024-26288phoenix contactcharx sec-3000+7EPSS score0.31%
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.CVE-2024-26001phoenix contactcharx sec-3000+7EPSS score0.87%
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.CVE-2024-25996phoenix contactcharx sec-3000+7EPSS score0.39%
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.CVE-2024-25998phoenix contactcharx sec-3000+7EPSS score1.47%
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.CVE-2024-25999phoenix contactcharx sec-3000+7EPSS score0.41%
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.CVE-2024-25994phoenix contactcharx sec-3000+7EPSS score0.73%
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.