CS
Product
Charx Sec-3100 Firmware
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 17Medium 7Low 0
Watch
Add Charx Sec-3100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-25270 | 9.8 | Jul 8 | Remote Code Execution via Unauthenticated Configuration Manipulation Affected: before 1.7.3 |
| CVE-2024-6788 | 9.8 | Aug 13 | Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password Affected: before 1.6.3 |
| CVE-2024-26001 | 9.8 | Mar 12 | PHOENIX CONTACT: Out of bounds write only memory access Affected: before 1.5.1 |
| CVE-2024-25996 | 9.8 | Mar 12 | PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series Affected: before 1.5.1 |
| CVE-2024-25995 | 9.8 | Mar 12 | PHOENIX CONTACT: Remote code execution in CHARX Series Affected: before 1.5.1 |
| CVE-2025-25271 | 8.8 | Jul 8 | OCPP Backend Configuration via Insecure Defaults Affected: before 1.7.3 |
| CVE-2025-25268 | 8.8 | Jul 8 | Unauthenticated Configuration Access via Exposed API Endpoint Affected: before 1.7.3 |
| CVE-2024-26288 | 8.7 | Mar 12 | PHOENIX CONTACT: Lack of SSL support in CHARX Series Affected: before 1.5.1 |
| CVE-2025-25269 | 8.4 | Jul 8 | Local Privilege Escalation via Unauthenticated Command Injection Affected: before 1.7.3 |
| CVE-2025-24003 | 8.2 | Jul 8 | MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations Affected: through 1.6.5 |
| CVE-2025-24006 | 7.8 | Jul 8 | Privilege Escalation via Insecure SSH Permissions Affected: before 1.7.3 |
| CVE-2025-24005 | 7.8 | Jul 8 | Local Privilege Escalation via Vulnerable SSH Script Affected: before 1.7.3 |
| CVE-2024-28137 | 7.8 | May 14 | PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series Affected: through 1.5.1 |
| CVE-2024-28136 | 7.8 | May 14 | PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service Affected: through 1.5.1 |
| CVE-2024-28133 | 7.8 | May 14 | PHOENIX CONTACT: Privilege escalation in CHARX Series Affected: through 1.5.1 |
| CVE-2024-26002 | 7.8 | Mar 12 | PHOENIX CONTACT: File ownership manipulation in CHARX Series Affected: before 1.5.1 |
| CVE-2024-25999 | 7.8 | Mar 12 | PHOENIX CONTACT: Privilege escalation in the OCPP agent service Affected: before 1.5.1 |
| CVE-2024-26004 | 7.5 | Mar 12 | PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series Affected: before 1.5.1 |
| CVE-2024-26003 | 7.5 | Mar 12 | PHOENIX CONTACT: DoS of the control agent in CHARX Series Affected: before 1.5.1 |
| CVE-2024-26000 | 7.5 | Mar 12 | PHOENIX CONTACT: Out of bounds read only memory access Affected: before 1.5.1 |
| CVE-2024-25998 | 7.3 | Mar 12 | PHOENIX CONTACT: Command injection in the OCPP Service Affected: before 1.5.1 |
| CVE-2024-28134 | 7.0 | May 14 | PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series Affected: through 1.5.1 |
| CVE-2024-3913 | 5.9 | Aug 13 | Phoenix Contact: Start sequence allows attack during the boot process Affected: before 1.6.3 |
| CVE-2025-24002 | 5.3 | Jul 8 | MQTT DoS Vulnerability in German EV Charging Stations Affected: through 1.6.5 |
| CVE-2024-25997 | 5.3 | Mar 12 | PHOENIX CONTACT: Log injection in CHARX Series Affected: before 1.5.1 |
| CVE-2024-25994 | 5.3 | Mar 12 | PHOENIX CONTACT: Unintended script file upload in CHARX Series Affected: before 1.5.1 |
| CVE-2025-24004 | 5.2 | Jul 8 | USB-C Buffer Overflow via Display Interface in EV Charging Stations Affected: through 1.6.5 |
| CVE-2024-28135 | 5.0 | May 14 | PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series Affected: through 1.5.1 |
| CVE-2024-26005 | 4.8 | Mar 12 | PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series Affected: before 1.5.1 |
Showing 29