agentprime: phoenix-contact-charx-sec-3100

agentprime: phoenix-contact-charx-sec-3100Every new CVE for phoenix-contact-charx-sec-3100.https://agentprime.io/CVE-2026-7849: Command Injection in SCM (idledisconnect parameter)https://agentprime.io/advisories/CVE-2026-7849/https://agentprime.io/advisories/CVE-2026-7849/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:54:03 GMTCVEcriticalCVE-2026-44108: Firewall bypass during shutdownhttps://agentprime.io/advisories/CVE-2026-44108/https://agentprime.io/advisories/CVE-2026-44108/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:53:42 GMTCVEcriticalCVE-2026-44107: Exposed Reboot via Modbushttps://agentprime.io/advisories/CVE-2026-44107/https://agentprime.io/advisories/CVE-2026-44107/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:53:28 GMTCVECVE-2026-44105: Cleartext password in logshttps://agentprime.io/advisories/CVE-2026-44105/https://agentprime.io/advisories/CVE-2026-44105/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:53:13 GMTCVECVE-2026-44106: Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website filehttps://agentprime.io/advisories/CVE-2026-44106/https://agentprime.io/advisories/CVE-2026-44106/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:52:58 GMTCVECVE-2026-44104: ControllerAgent does not perform validation of firmwarehttps://agentprime.io/advisories/CVE-2026-44104/https://agentprime.io/advisories/CVE-2026-44104/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:52:31 GMTCVEcriticalCVE-2026-44103: JupiCore does not perform validation of firmwarehttps://agentprime.io/advisories/CVE-2026-44103/https://agentprime.io/advisories/CVE-2026-44103/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:52:07 GMTCVECVE-2026-44102: OCPP Firmware download is not properly lockedhttps://agentprime.io/advisories/CVE-2026-44102/https://agentprime.io/advisories/CVE-2026-44102/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:51:42 GMTCVECVE-2026-44101: OCPP reconfiguration vulnerabilityhttps://agentprime.io/advisories/CVE-2026-44101/https://agentprime.io/advisories/CVE-2026-44101/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:51:09 GMTCVEcriticalCVE-2026-44100: JupiCore charging point reconfiguration without authhttps://agentprime.io/advisories/CVE-2026-44100/https://agentprime.io/advisories/CVE-2026-44100/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:50:41 GMTCVECVE-2026-44099: Local Privilege Escalation via pppd password injectionhttps://agentprime.io/advisories/CVE-2026-44099/https://agentprime.io/advisories/CVE-2026-44099/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:50:08 GMTCVECVE-2026-44098: OS Command Injection in OCPP Agent via charge_box_idhttps://agentprime.io/advisories/CVE-2026-44098/https://agentprime.io/advisories/CVE-2026-44098/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:49:53 GMTCVECVE-2026-44097: File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2026-44097/https://agentprime.io/advisories/CVE-2026-44097/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:49:34 GMTCVECVE-2026-44096: udhcpc Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-44096/https://agentprime.io/advisories/CVE-2026-44096/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:49:16 GMTCVECVE-2026-44095: Local Privilege Escalation via Network scriptshttps://agentprime.io/advisories/CVE-2026-44095/https://agentprime.io/advisories/CVE-2026-44095/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:48:55 GMTCVECVE-2026-44094: Fallback to second RAUC slot with default credentialshttps://agentprime.io/advisories/CVE-2026-44094/https://agentprime.io/advisories/CVE-2026-44094/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:48:37 GMTCVECVE-2026-44093: Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start scripthttps://agentprime.io/advisories/CVE-2026-44093/https://agentprime.io/advisories/CVE-2026-44093/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:48:19 GMTCVECVE-2026-44092: Missing input validation / stripping of CRLF characters in SystemConfigManagerhttps://agentprime.io/advisories/CVE-2026-44092/https://agentprime.io/advisories/CVE-2026-44092/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:47:57 GMTCVECVE-2026-44091: Creation of a new configuration by posting a malicious ID to MQTThttps://agentprime.io/advisories/CVE-2026-44091/https://agentprime.io/advisories/CVE-2026-44091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:47:37 GMTCVECVE-2026-44090: Missing authentication for MQTT Brokerhttps://agentprime.io/advisories/CVE-2026-44090/https://agentprime.io/advisories/CVE-2026-44090/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 06:47:04 GMTCVEcriticalCVE-2026-41032: Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllershttps://agentprime.io/advisories/CVE-2026-41032/https://agentprime.io/advisories/CVE-2026-41032/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 10:16:16 GMTCVECVE-2025-41699: Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllershttps://agentprime.io/advisories/CVE-2025-41699/https://agentprime.io/advisories/CVE-2025-41699/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Oct 2025 08:35:05 GMTCVECVE-2025-25271: OCPP Backend Configuration via Insecure Defaultshttps://agentprime.io/advisories/CVE-2025-25271/https://agentprime.io/advisories/CVE-2025-25271/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 07:01:33 GMTCVECVE-2025-25270: Remote Code Execution via Unauthenticated Configuration Manipulationhttps://agentprime.io/advisories/CVE-2025-25270/https://agentprime.io/advisories/CVE-2025-25270/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 07:00:58 GMTCVEcriticalCVE-2025-25269: Local Privilege Escalation via Unauthenticated Command Injectionhttps://agentprime.io/advisories/CVE-2025-25269/https://agentprime.io/advisories/CVE-2025-25269/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 07:00:42 GMTCVECVE-2025-25268: Unauthenticated Configuration Access via Exposed API Endpointhttps://agentprime.io/advisories/CVE-2025-25268/https://agentprime.io/advisories/CVE-2025-25268/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 07:00:27 GMTCVECVE-2025-24006: Privilege Escalation via Insecure SSH Permissionshttps://agentprime.io/advisories/CVE-2025-24006/https://agentprime.io/advisories/CVE-2025-24006/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 07:00:03 GMTCVECVE-2025-24005: Local Privilege Escalation via Vulnerable SSH Scripthttps://agentprime.io/advisories/CVE-2025-24005/https://agentprime.io/advisories/CVE-2025-24005/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 06:59:45 GMTCVECVE-2025-24004: USB-C Buffer Overflow via Display Interface in EV Charging Stationshttps://agentprime.io/advisories/CVE-2025-24004/https://agentprime.io/advisories/CVE-2025-24004/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 06:59:32 GMTCVECVE-2025-24003: MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stationshttps://agentprime.io/advisories/CVE-2025-24003/https://agentprime.io/advisories/CVE-2025-24003/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 06:59:17 GMTCVECVE-2025-24002: MQTT DoS Vulnerability in German EV Charging Stationshttps://agentprime.io/advisories/CVE-2025-24002/https://agentprime.io/advisories/CVE-2025-24002/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 06:58:58 GMTCVECVE-2024-11497: Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalationhttps://agentprime.io/advisories/CVE-2024-11497/https://agentprime.io/advisories/CVE-2024-11497/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 13:55:57 GMTCVECVE-2024-6788: Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user passwordhttps://agentprime.io/advisories/CVE-2024-6788/https://agentprime.io/advisories/CVE-2024-6788/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Aug 2024 13:15:03 GMTCVECVE-2024-28137: PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Serieshttps://agentprime.io/advisories/CVE-2024-28137/https://agentprime.io/advisories/CVE-2024-28137/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 08:10:06 GMTCVECVE-2024-28136: PHOENIX CONTACT: command injection gains root privileges using the OCPP remote servicehttps://agentprime.io/advisories/CVE-2024-28136/https://agentprime.io/advisories/CVE-2024-28136/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 08:09:52 GMTCVECVE-2024-28135: PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Serieshttps://agentprime.io/advisories/CVE-2024-28135/https://agentprime.io/advisories/CVE-2024-28135/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 08:09:39 GMTCVECVE-2024-28134: PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-28134/https://agentprime.io/advisories/CVE-2024-28134/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 08:09:24 GMTCVECVE-2024-28133: PHOENIX CONTACT: Privilege escalation in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-28133/https://agentprime.io/advisories/CVE-2024-28133/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 08:09:11 GMTCVECVE-2024-26288: PHOENIX CONTACT: Lack of SSL support in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-26288/https://agentprime.io/advisories/CVE-2024-26288/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:13:05 GMTCVECVE-2024-26005: PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-26005/https://agentprime.io/advisories/CVE-2024-26005/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:12:48 GMTCVECVE-2024-26004: PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-26004/https://agentprime.io/advisories/CVE-2024-26004/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:12:38 GMTCVECVE-2024-26003: PHOENIX CONTACT: DoS of the control agent in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-26003/https://agentprime.io/advisories/CVE-2024-26003/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:12:26 GMTCVECVE-2024-26002: PHOENIX CONTACT: File ownership manipulation in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-26002/https://agentprime.io/advisories/CVE-2024-26002/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:12:13 GMTCVECVE-2024-26001: PHOENIX CONTACT: Out of bounds write only memory accesshttps://agentprime.io/advisories/CVE-2024-26001/https://agentprime.io/advisories/CVE-2024-26001/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:12:03 GMTCVECVE-2024-26000: PHOENIX CONTACT: Out of bounds read only memory accesshttps://agentprime.io/advisories/CVE-2024-26000/https://agentprime.io/advisories/CVE-2024-26000/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:11:52 GMTCVECVE-2024-25999: PHOENIX CONTACT: Privilege escalation in the OCPP agent servicehttps://agentprime.io/advisories/CVE-2024-25999/https://agentprime.io/advisories/CVE-2024-25999/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:11:41 GMTCVECVE-2024-25998: PHOENIX CONTACT: Command injection in the OCPP Servicehttps://agentprime.io/advisories/CVE-2024-25998/https://agentprime.io/advisories/CVE-2024-25998/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:11:31 GMTCVECVE-2024-25997: PHOENIX CONTACT: Log injection in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-25997/https://agentprime.io/advisories/CVE-2024-25997/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:11:19 GMTCVECVE-2024-25996: PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-25996/https://agentprime.io/advisories/CVE-2024-25996/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:11:08 GMTCVECVE-2024-25995: PHOENIX CONTACT: Remote code execution in CHARX Serieshttps://agentprime.io/advisories/CVE-2024-25995/https://agentprime.io/advisories/CVE-2024-25995/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 08:10:58 GMTCVEcritical