Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers

OCPP Backend Configuration via Insecure Defaults

Unauthenticated Configuration Access via Exposed API Endpoint

Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation

PHOENIX CONTACT: Lack of SSL support in CHARX Series

OS Command Injection in OCPP Agent via charge_box_id

Fallback to second RAUC slot with default credentials

Local Privilege Escalation via Unauthenticated Command Injection

MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file

Local Privilege Escalation via pppd password injection

udhcpc Privilege Escalation

Local Privilege Escalation via Network scripts

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script

Privilege Escalation via Insecure SSH Permissions

Local Privilege Escalation via Vulnerable SSH Script

PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series

PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service

PHOENIX CONTACT: Privilege escalation in CHARX Series

PHOENIX CONTACT: File ownership manipulation in CHARX Series

PHOENIX CONTACT: Privilege escalation in the OCPP agent service

Exposed Reboot via Modbus

Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers

PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series

PHOENIX CONTACT: DoS of the control agent in CHARX Series

PHOENIX CONTACT: Out of bounds read only memory access

PHOENIX CONTACT: Command injection in the OCPP Service

File Upload vulnerability

PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series