Approved changes feed: RSS · Atom

cpe:2.3:o:phoenixcontact:charx_sec-3000_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductCharx Sec 3000 Firmware (dacfba32-291f-50e7-932f-28e30f070772)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25271 vulnerable 2026-06-08 07:12:51.074130 OCPP Backend Configuration via Insecure Defaults
HIGH (8.8)
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
Published: 2025-07-08T07:01:33.274Z
Updated: 2025-07-22T07:50:50.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25270 vulnerable 2026-06-08 07:12:51.073387 Remote Code Execution via Unauthenticated Configuration Manipulation
CRITICAL (9.8)
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
Published: 2025-07-08T07:00:58.478Z
Updated: 2025-07-08T14:28:53.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25269 vulnerable 2026-06-08 07:12:51.072471 Local Privilege Escalation via Unauthenticated Command Injection
HIGH (8.4)
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
Published: 2025-07-08T07:00:42.749Z
Updated: 2025-07-08T14:29:03.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25268 vulnerable 2026-06-08 07:12:51.071534 Unauthenticated Configuration Access via Exposed API Endpoint
HIGH (8.8)
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.
Published: 2025-07-08T07:00:27.103Z
Updated: 2025-07-08T14:29:11.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24006 vulnerable 2026-06-08 07:12:47.303594 Privilege Escalation via Insecure SSH Permissions
HIGH (7.8)
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.
Published: 2025-07-08T07:00:03.724Z
Updated: 2025-07-08T14:29:19.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24005 vulnerable 2026-06-08 07:12:47.302234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24004 vulnerable 2026-06-08 07:12:47.300401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24003 vulnerable 2026-06-08 07:12:47.298995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24002 vulnerable 2026-06-08 07:12:47.291074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6788 vulnerable 2026-06-08 06:58:20.454825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3913 vulnerable 2026-06-08 06:43:51.860925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28137 vulnerable 2026-06-08 06:33:26.554312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28136 vulnerable 2026-06-08 06:33:26.552834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28135 vulnerable 2026-06-08 06:33:26.551303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28134 vulnerable 2026-06-08 06:33:26.549777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28133 vulnerable 2026-06-08 06:33:26.543583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26288 vulnerable 2026-06-08 06:31:26.255585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26005 vulnerable 2026-06-08 06:31:24.253786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26004 vulnerable 2026-06-08 06:31:24.252552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26003 vulnerable 2026-06-08 06:31:24.250974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26002 vulnerable 2026-06-08 06:31:24.248951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26001 vulnerable 2026-06-08 06:31:24.247291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26000 vulnerable 2026-06-08 06:31:24.245550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25999 vulnerable 2026-06-08 06:31:24.244293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25998 vulnerable 2026-06-08 06:31:24.243086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25997 vulnerable 2026-06-08 06:31:24.241566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25996 vulnerable 2026-06-08 06:31:24.240025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25995 vulnerable 2026-06-08 06:31:24.237055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25994 vulnerable 2026-06-08 06:31:24.229607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.