Approved changes feed: RSS · Atom

cpe:2.3:a:phoenix_contact:charx_sec-3150:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhoenix Contact (bcce83d0-b267-5887-ab90-2a4405e0861d)
ProductCharx Sec 3150 (0bd47cf4-11ef-5b41-a82e-4d363ceeae18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-41032 vulnerable 2026-06-08 08:03:14.567548 Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
HIGH (7.5)
It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.
Published: 2026-06-03T10:16:16.992Z
Updated: 2026-06-03T12:39:40.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41699 vulnerable 2026-06-08 07:25:07.755464 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
HIGH (8.8)
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection').
Published: 2025-10-14T08:35:05.215Z
Updated: 2025-10-15T06:36:45.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25271 vulnerable 2026-06-08 07:12:51.074038 OCPP Backend Configuration via Insecure Defaults
HIGH (8.8)
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
Published: 2025-07-08T07:01:33.274Z
Updated: 2025-07-22T07:50:50.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25270 vulnerable 2026-06-08 07:12:51.073299 Remote Code Execution via Unauthenticated Configuration Manipulation
CRITICAL (9.8)
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
Published: 2025-07-08T07:00:58.478Z
Updated: 2025-07-08T14:28:53.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25269 vulnerable 2026-06-08 07:12:51.072376 Local Privilege Escalation via Unauthenticated Command Injection
HIGH (8.4)
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
Published: 2025-07-08T07:00:42.749Z
Updated: 2025-07-08T14:29:03.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25268 vulnerable 2026-06-08 07:12:51.071428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24006 vulnerable 2026-06-08 07:12:47.303357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24005 vulnerable 2026-06-08 07:12:47.301694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24004 vulnerable 2026-06-08 07:12:47.300078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24003 vulnerable 2026-06-08 07:12:47.298602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24002 vulnerable 2026-06-08 07:12:47.274061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6788 vulnerable 2026-06-08 06:58:20.454087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28137 vulnerable 2026-06-08 06:33:26.554183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28136 vulnerable 2026-06-08 06:33:26.552814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28135 vulnerable 2026-06-08 06:33:26.551173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28134 vulnerable 2026-06-08 06:33:26.549756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28133 vulnerable 2026-06-08 06:33:26.542837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26288 vulnerable 2026-06-08 06:31:26.255454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26005 vulnerable 2026-06-08 06:31:24.253764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26004 vulnerable 2026-06-08 06:31:24.252531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26003 vulnerable 2026-06-08 06:31:24.250953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26002 vulnerable 2026-06-08 06:31:24.248840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26001 vulnerable 2026-06-08 06:31:24.247269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26000 vulnerable 2026-06-08 06:31:24.245433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25999 vulnerable 2026-06-08 06:31:24.244270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25998 vulnerable 2026-06-08 06:31:24.242972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25997 vulnerable 2026-06-08 06:31:24.241433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25996 vulnerable 2026-06-08 06:31:24.240006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25995 vulnerable 2026-06-08 06:31:24.237032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25994 vulnerable 2026-06-08 06:31:24.228733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11497 vulnerable 2026-06-08 06:23:49.733928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.