# Phoenix Contact CHARX SEC-3150. Every CVE that names Phoenix Contact CHARX SEC-3150 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Command Injection in SCM (idledisconnect parameter)](https://agentprime.io/advisories/CVE-2026-7849.md) `CVE-2026-7849` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Firewall bypass during shutdown](https://agentprime.io/advisories/CVE-2026-44108.md) `CVE-2026-44108` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-696 - [Exposed Reboot via Modbus](https://agentprime.io/advisories/CVE-2026-44107.md) `CVE-2026-44107` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.7 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-749 - [Cleartext password in logs](https://agentprime.io/advisories/CVE-2026-44105.md) `CVE-2026-44105` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure - [Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file](https://agentprime.io/advisories/CVE-2026-44106.md) `CVE-2026-44106` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [ControllerAgent does not perform validation of firmware](https://agentprime.io/advisories/CVE-2026-44104.md) `CVE-2026-44104` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS - [JupiCore does not perform validation of firmware](https://agentprime.io/advisories/CVE-2026-44103.md) `CVE-2026-44103` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload - [OCPP Firmware download is not properly locked](https://agentprime.io/advisories/CVE-2026-44102.md) `CVE-2026-44102` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Race condition - [OCPP reconfiguration vulnerability](https://agentprime.io/advisories/CVE-2026-44101.md) `CVE-2026-44101` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass - [JupiCore charging point reconfiguration without auth](https://agentprime.io/advisories/CVE-2026-44100.md) `CVE-2026-44100` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass - [Local Privilege Escalation via pppd password injection](https://agentprime.io/advisories/CVE-2026-44099.md) `CVE-2026-44099` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [OS Command Injection in OCPP Agent via charge_box_id](https://agentprime.io/advisories/CVE-2026-44098.md) `CVE-2026-44098` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-44097.md) `CVE-2026-44097` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload - [udhcpc Privilege Escalation](https://agentprime.io/advisories/CVE-2026-44096.md) `CVE-2026-44096` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Local Privilege Escalation via Network scripts](https://agentprime.io/advisories/CVE-2026-44095.md) `CVE-2026-44095` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Fallback to second RAUC slot with default credentials](https://agentprime.io/advisories/CVE-2026-44094.md) `CVE-2026-44094` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-636 - [Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script](https://agentprime.io/advisories/CVE-2026-44093.md) `CVE-2026-44093` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Missing input validation / stripping of CRLF characters in SystemConfigManager](https://agentprime.io/advisories/CVE-2026-44092.md) `CVE-2026-44092` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Other injection - [Creation of a new configuration by posting a malicious ID to MQTT](https://agentprime.io/advisories/CVE-2026-44091.md) `CVE-2026-44091` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-501 - [Missing authentication for MQTT Broker](https://agentprime.io/advisories/CVE-2026-44090.md) `CVE-2026-44090` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass - [Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers](https://agentprime.io/advisories/CVE-2026-41032.md) `CVE-2026-41032` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 7.5 High · Not analysed yet · Published 3 Jun 2026 · Tags: Information disclosure - [Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers](https://agentprime.io/advisories/CVE-2025-41699.md) `CVE-2025-41699` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Code injection - [OCPP Backend Configuration via Insecure Defaults](https://agentprime.io/advisories/CVE-2025-25271.md) `CVE-2025-25271` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1188 - [Remote Code Execution via Unauthenticated Configuration Manipulation](https://agentprime.io/advisories/CVE-2025-25270.md) `CVE-2025-25270` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-913 - [Local Privilege Escalation via Unauthenticated Command Injection](https://agentprime.io/advisories/CVE-2025-25269.md) `CVE-2025-25269` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.4 High · Not analysed yet · Published 8 Jul 2025 · Tags: Command injection - [Unauthenticated Configuration Access via Exposed API Endpoint](https://agentprime.io/advisories/CVE-2025-25268.md) `CVE-2025-25268` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Authentication bypass - [Privilege Escalation via Insecure SSH Permissions](https://agentprime.io/advisories/CVE-2025-24006.md) `CVE-2025-24006` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Privilege escalation - [Local Privilege Escalation via Vulnerable SSH Script](https://agentprime.io/advisories/CVE-2025-24005.md) `CVE-2025-24005` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-20 - [USB-C Buffer Overflow via Display Interface in EV Charging Stations](https://agentprime.io/advisories/CVE-2025-24004.md) `CVE-2025-24004` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 5.2 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations](https://agentprime.io/advisories/CVE-2025-24003.md) `CVE-2025-24003` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.2 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [MQTT DoS Vulnerability in German EV Charging Stations](https://agentprime.io/advisories/CVE-2025-24002.md) `CVE-2025-24002` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-20 - [Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation](https://agentprime.io/advisories/CVE-2024-11497.md) `CVE-2024-11497` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control - [Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password](https://agentprime.io/advisories/CVE-2024-6788.md) `CVE-2024-6788` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 8.6 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-1392 - [PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series](https://agentprime.io/advisories/CVE-2024-28137.md) `CVE-2024-28137` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 May 2024 · Tags: Race condition - [PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service](https://agentprime.io/advisories/CVE-2024-28136.md) `CVE-2024-28136` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 May 2024 · Tags: Command injection - [PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series](https://agentprime.io/advisories/CVE-2024-28135.md) `CVE-2024-28135` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 5.0 Medium · Not analysed yet · Published 14 May 2024 · Tags: Command injection - [PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series](https://agentprime.io/advisories/CVE-2024-28134.md) `CVE-2024-28134` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.0 High · Not analysed yet · Published 14 May 2024 · Tags: Weak cryptography or TLS - [PHOENIX CONTACT: Privilege escalation in CHARX Series](https://agentprime.io/advisories/CVE-2024-28133.md) `CVE-2024-28133` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 May 2024 · Tags: CWE-426 - [PHOENIX CONTACT: Lack of SSL support in CHARX Series](https://agentprime.io/advisories/CVE-2024-26288.md) `CVE-2024-26288` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 8.7 High · Not analysed yet · Published 12 Mar 2024 · Tags: Weak cryptography or TLS - [PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series](https://agentprime.io/advisories/CVE-2024-26005.md) `CVE-2024-26005` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 4.8 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-459 - [PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series](https://agentprime.io/advisories/CVE-2024-26004.md) `CVE-2024-26004` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption - [PHOENIX CONTACT: DoS of the control agent in CHARX Series](https://agentprime.io/advisories/CVE-2024-26003.md) `CVE-2024-26003` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption - [PHOENIX CONTACT: File ownership manipulation in CHARX Series](https://agentprime.io/advisories/CVE-2024-26002.md) `CVE-2024-26002` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20 - [PHOENIX CONTACT: Out of bounds write only memory access](https://agentprime.io/advisories/CVE-2024-26001.md) `CVE-2024-26001` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.4 High · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption - [PHOENIX CONTACT: Out of bounds read only memory access](https://agentprime.io/advisories/CVE-2024-26000.md) `CVE-2024-26000` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Memory corruption - [PHOENIX CONTACT: Privilege escalation in the OCPP agent service](https://agentprime.io/advisories/CVE-2024-25999.md) `CVE-2024-25999` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 8.4 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20 - [PHOENIX CONTACT: Command injection in the OCPP Service](https://agentprime.io/advisories/CVE-2024-25998.md) `CVE-2024-25998` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 7.3 High · Not analysed yet · Published 12 Mar 2024 · Tags: Command injection - [PHOENIX CONTACT: Log injection in CHARX Series](https://agentprime.io/advisories/CVE-2024-25997.md) `CVE-2024-25997` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20 - [PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series](https://agentprime.io/advisories/CVE-2024-25996.md) `CVE-2024-25996` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-346 - [PHOENIX CONTACT: Remote code execution in CHARX Series](https://agentprime.io/advisories/CVE-2024-25995.md) `CVE-2024-25995` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-20 - [PHOENIX CONTACT: Unintended script file upload in CHARX Series](https://agentprime.io/advisories/CVE-2024-25994.md) `CVE-2024-25994` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: Unrestricted file upload ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .