Approved changes feed: RSS · Atom

cpe:2.3:o:phoenixcontact:charx_sec-3050_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorPhoenixcontact (ad43784c-598b-51b1-a640-9cd70ab4c265)
ProductCharx Sec 3050 Firmware (aad21e26-a254-5246-a0d8-467556712e3c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25271 vulnerable 2026-06-08 07:12:51.074286 OCPP Backend Configuration via Insecure Defaults
HIGH (8.8)
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
Published: 2025-07-08T07:01:33.274Z
Updated: 2025-07-22T07:50:50.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25270 vulnerable 2026-06-08 07:12:51.073427 Remote Code Execution via Unauthenticated Configuration Manipulation
CRITICAL (9.8)
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
Published: 2025-07-08T07:00:58.478Z
Updated: 2025-07-08T14:28:53.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25269 vulnerable 2026-06-08 07:12:51.072511 Local Privilege Escalation via Unauthenticated Command Injection
HIGH (8.4)
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
Published: 2025-07-08T07:00:42.749Z
Updated: 2025-07-08T14:29:03.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25268 vulnerable 2026-06-08 07:12:51.071813 Unauthenticated Configuration Access via Exposed API Endpoint
HIGH (8.8)
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.
Published: 2025-07-08T07:00:27.103Z
Updated: 2025-07-08T14:29:11.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24006 vulnerable 2026-06-08 07:12:47.303638 Privilege Escalation via Insecure SSH Permissions
HIGH (7.8)
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.
Published: 2025-07-08T07:00:03.724Z
Updated: 2025-07-08T14:29:19.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24005 vulnerable 2026-06-08 07:12:47.302404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24004 vulnerable 2026-06-08 07:12:47.300725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24003 vulnerable 2026-06-08 07:12:47.299149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24002 vulnerable 2026-06-08 07:12:47.293749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6788 vulnerable 2026-06-08 06:58:20.456448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3913 vulnerable 2026-06-08 06:43:51.859114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28137 vulnerable 2026-06-08 06:33:26.554435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28136 vulnerable 2026-06-08 06:33:26.552876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28135 vulnerable 2026-06-08 06:33:26.551343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28134 vulnerable 2026-06-08 06:33:26.549819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28133 vulnerable 2026-06-08 06:33:26.545029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26288 vulnerable 2026-06-08 06:31:26.255725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26005 vulnerable 2026-06-08 06:31:24.253996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26004 vulnerable 2026-06-08 06:31:24.252590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26003 vulnerable 2026-06-08 06:31:24.251116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26002 vulnerable 2026-06-08 06:31:24.249146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26001 vulnerable 2026-06-08 06:31:24.247333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26000 vulnerable 2026-06-08 06:31:24.245740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25999 vulnerable 2026-06-08 06:31:24.244333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25998 vulnerable 2026-06-08 06:31:24.243279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25997 vulnerable 2026-06-08 06:31:24.241603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25996 vulnerable 2026-06-08 06:31:24.240065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25995 vulnerable 2026-06-08 06:31:24.237098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25994 vulnerable 2026-06-08 06:31:24.231649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.