Phoenixcontact vulnerabilities, page 5
145 vulnerabilities
Known vulnerabilities in Phoenixcontact products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 351 products.
CVE-2024-26000phoenix contactcharx sec-3000+7
EPSS score0.81%
An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.CVE-2024-26003phoenix contactcharx sec-3000+7EPSS score1.16%
An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality.CVE-2024-26004phoenix contactcharx sec-3000+7EPSS score1.00%
An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality.CVE-2024-26002phoenix contactcharx sec-3000+7EPSS score0.26%
An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.CVE-2024-26005phoenix contactcharx sec-3000+7EPSS score0.62%
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.CVE-2024-26288phoenix contactcharx sec-3000+7EPSS score0.31%
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.CVE-2024-26001phoenix contactcharx sec-3000+7EPSS score0.87%
An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of memory randomization.CVE-2024-25996phoenix contactcharx sec-3000+7EPSS score0.39%
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.CVE-2024-25998phoenix contactcharx sec-3000+7EPSS score1.47%
An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.CVE-2024-25999phoenix contactcharx sec-3000+7EPSS score0.41%
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.CVE-2024-25994phoenix contactcharx sec-3000+7EPSS score0.73%
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.CVE-2024-25997phoenix contactcharx sec-3000+7EPSS score0.69%
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.CVE-2024-25995phoenix contactcharx sec-3000+7EPSS score1.40%
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.CVE-2024-43385phoenix contactfl mguard 2102+71EPSS score0.74%
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices.CVE-2024-43391phoenix contactfl mguard 2102+71EPSS score0.52%
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_PORTFORWARDING.SRC_IP environment variable which can lead to a DoS.CVE-2024-43386phoenix contactfl mguard 2102+71EPSS score0.74%
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices.CVE-2024-43392phoenix contactfl mguard 2102+65EPSS score0.52%
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP environment variable which can lead to a DoS.CVE-2024-43387phoenix contactfl mguard 2102+71EPSS score0.56%
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices.CVE-2024-43393phoenix contactfl mguard 2102+71EPSS score0.52%
A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access control or NAT through the FW_INCOMING.FROM_IP FW_INCOMING.IN_IP FW_OUTGOING.FROM_IP FW_OUTGOING.IN_IP FW_RULESETS.FROM_IP FW_RULESETS.IN_IP environment variable which can lead to a DoS.CVE-2024-43389phoenix contactfl mguard 2102+71EPSS score0.52%
A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGEST_KEY environment variables which can lead to a DoS.