Charx Sec 3150
Approved changes feed: RSS · Atom
cpe:2.3:o:phoenix_contact:charx_sec_3150:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Phoenix Contact (bcce83d0-b267-5887-ab90-2a4405e0861d) |
|---|---|
| Product | Charx Sec 3150 (645dfd9a-46f4-5c32-aabe-405a5da85db6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7849 |
vulnerable | 2026-09-16 04:34:09.703799 |
Command Injection in SCM (idledisconnect parameter)
CRITICAL (9.8)
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as root.
Published: 2026-07-30T06:54:03.542Z
Updated: 2026-07-30T14:06:42.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44095 |
vulnerable | 2026-09-16 04:33:45.896915 |
Local Privilege Escalation via Network scripts
HIGH (7.8)
A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise.
Published: 2026-07-30T06:48:55.750Z
Updated: 2026-07-30T12:32:56.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44100 |
vulnerable | 2026-09-16 04:33:45.853335 |
JupiCore charging point reconfiguration without auth
CRITICAL (9.4)
The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering.
Published: 2026-07-30T06:50:41.583Z
Updated: 2026-07-30T12:29:40.648Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44091 |
vulnerable | 2026-09-16 04:33:45.810567 |
Creation of a new configuration by posting a malicious ID to MQTT
CRITICAL (9.1)
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss.
Published: 2026-07-30T06:47:37.456Z
Updated: 2026-07-31T22:44:06.392Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44104 |
vulnerable | 2026-09-16 04:33:45.765313 |
ControllerAgent does not perform validation of firmware
CRITICAL (9.8)
The firmware update process for the basemodule of the charging controller only validates the
CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.
Published: 2026-07-30T06:52:31.346Z
Updated: 2026-07-30T14:05:46.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44108 |
vulnerable | 2026-09-16 04:33:45.751276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44099 |
vulnerable | 2026-09-16 04:33:45.547692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44098 |
vulnerable | 2026-09-16 04:33:45.428594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44094 |
vulnerable | 2026-09-16 04:33:45.404248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44101 |
vulnerable | 2026-09-16 04:33:45.374608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44090 |
vulnerable | 2026-09-16 04:33:45.326707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44105 |
vulnerable | 2026-09-16 04:33:45.296156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44096 |
vulnerable | 2026-09-16 04:33:45.177250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44103 |
vulnerable | 2026-09-16 04:33:45.146270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44092 |
vulnerable | 2026-09-16 04:33:45.079285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44107 |
vulnerable | 2026-09-16 04:33:45.048420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44097 |
vulnerable | 2026-09-16 04:33:45.037496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44102 |
vulnerable | 2026-09-16 04:33:45.008173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44093 |
vulnerable | 2026-09-16 04:33:44.962868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44106 |
vulnerable | 2026-09-16 04:33:44.929693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.