Advisories · Technology

Phoenix Contact CHARX SEC-3150.

Every CVE that names Phoenix Contact CHARX SEC-3150 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7849 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Command Injection in SCM (idledisconnect parameter)
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44108 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Firewall bypass during shutdown
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-696
Not analysed yet 30 Jul 2026
CVE-2026-44107 CVE record

CVSS 8.7 High

Exposed Reboot via Modbus
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-749
Not analysed yet 30 Jul 2026
CVE-2026-44105 CVE record

CVSS 5.8 Medium

Cleartext password in logs
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Information disclosure
Not analysed yet 30 Jul 2026
CVE-2026-44106 CVE record

CVSS 8.5 High

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44104 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

ControllerAgent does not perform validation of firmware
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Weak cryptography or TLS
Not analysed yet 30 Jul 2026
CVE-2026-44103 CVE record

CVSS 6.9 Medium

JupiCore does not perform validation of firmware
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Unrestricted file upload
Not analysed yet 30 Jul 2026
CVE-2026-44102 CVE record

CVSS 6.9 Medium

OCPP Firmware download is not properly locked
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Race condition
Not analysed yet 30 Jul 2026
CVE-2026-44101 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

OCPP reconfiguration vulnerability
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-44100 CVE record

CVSS 8.8 High

JupiCore charging point reconfiguration without auth
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-44099 CVE record

CVSS 8.5 High

Local Privilege Escalation via pppd password injection
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44098 CVE record

CVSS 8.8 High

OS Command Injection in OCPP Agent via charge_box_id
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44097 CVE record

CVSS 5.3 Medium

File Upload vulnerability
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Unrestricted file upload
Not analysed yet 30 Jul 2026
CVE-2026-44096 CVE record

CVSS 8.5 High

udhcpc Privilege Escalation
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44095 CVE record

CVSS 8.5 High

Local Privilege Escalation via Network scripts
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44094 CVE record

CVSS 8.3 High

Fallback to second RAUC slot with default credentials
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-636
Not analysed yet 30 Jul 2026
CVE-2026-44093 CVE record

CVSS 8.5 High

Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 30 Jul 2026
CVE-2026-44092 CVE record

CVSS 8.8 High

Missing input validation / stripping of CRLF characters in SystemConfigManager
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Other injection
Not analysed yet 30 Jul 2026
CVE-2026-44091 CVE record

CVSS 8.8 High

Creation of a new configuration by posting a malicious ID to MQTT
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-501
Not analysed yet 30 Jul 2026
CVE-2026-44090 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Missing authentication for MQTT Broker
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-41032 CVE record

CVSS 7.5 High

Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Information disclosure
Not analysed yet 3 Jun 2026
CVE-2025-41699 CVE record

CVSS 8.8 High

Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Code injection
Not analysed yet 14 Oct 2025
CVE-2025-25271 CVE record

CVSS 8.8 High

OCPP Backend Configuration via Insecure Defaults
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-1188
Not analysed yet 8 Jul 2025
CVE-2025-25270 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Remote Code Execution via Unauthenticated Configuration Manipulation
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-913
Not analysed yet 8 Jul 2025
CVE-2025-25269 CVE record

CVSS 8.4 High

Local Privilege Escalation via Unauthenticated Command Injection
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Command injection
Not analysed yet 8 Jul 2025
CVE-2025-25268 CVE record

CVSS 8.8 High

Unauthenticated Configuration Access via Exposed API Endpoint
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Authentication bypass
Not analysed yet 8 Jul 2025
CVE-2025-24006 CVE record

CVSS 7.8 High

Privilege Escalation via Insecure SSH Permissions
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Privilege escalation
Not analysed yet 8 Jul 2025
CVE-2025-24005 CVE record

CVSS 7.8 High

Local Privilege Escalation via Vulnerable SSH Script
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2025-24004 CVE record

CVSS 5.2 Medium

USB-C Buffer Overflow via Display Interface in EV Charging Stations
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-24003 CVE record

CVSS 8.2 High

MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-24002 CVE record

CVSS 5.3 Medium

MQTT DoS Vulnerability in German EV Charging Stations
- Phoenix Contact CHARX SEC-3150
- Phoenix Contact CHARX SEC-3100
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2024-11497 CVE record

CVSS 8.8 High

Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2024-6788 CVE record

CVSS 8.6 High

Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-1392
Not analysed yet 13 Aug 2024
CVE-2024-28137 CVE record

CVSS 7.8 High

PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Race condition
Not analysed yet 14 May 2024
CVE-2024-28136 CVE record

CVSS 7.8 High

PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Command injection
Not analysed yet 14 May 2024
CVE-2024-28135 CVE record

CVSS 5.0 Medium

PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Command injection
Not analysed yet 14 May 2024
CVE-2024-28134 CVE record

CVSS 7.0 High

PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Weak cryptography or TLS
Not analysed yet 14 May 2024
CVE-2024-28133 CVE record

CVSS 7.8 High

PHOENIX CONTACT: Privilege escalation in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-426
Not analysed yet 14 May 2024
CVE-2024-26288 CVE record

CVSS 8.7 High

PHOENIX CONTACT: Lack of SSL support in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Weak cryptography or TLS
Not analysed yet 12 Mar 2024
CVE-2024-26005 CVE record

CVSS 4.8 Medium

PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-459
Not analysed yet 12 Mar 2024
CVE-2024-26004 CVE record

CVSS 7.5 High

PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26003 CVE record

CVSS 7.5 High

PHOENIX CONTACT: DoS of the control agent in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26002 CVE record

CVSS 7.8 High

PHOENIX CONTACT: File ownership manipulation in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26001 CVE record

CVSS 7.4 High

PHOENIX CONTACT: Out of bounds write only memory access
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26000 CVE record

CVSS 5.9 Medium

PHOENIX CONTACT: Out of bounds read only memory access
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-25999 CVE record

CVSS 8.4 High

PHOENIX CONTACT: Privilege escalation in the OCPP agent service
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-25998 CVE record

CVSS 7.3 High

PHOENIX CONTACT: Command injection in the OCPP Service
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Command injection
Not analysed yet 12 Mar 2024
CVE-2024-25997 CVE record

CVSS 5.3 Medium

PHOENIX CONTACT: Log injection in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-25996 CVE record

CVSS 5.3 Medium

PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-346
Not analysed yet 12 Mar 2024
CVE-2024-25995 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

PHOENIX CONTACT: Remote code execution in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-25994 CVE record

CVSS 5.3 Medium

PHOENIX CONTACT: Unintended script file upload in CHARX Series
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- Unrestricted file upload
Not analysed yet 12 Mar 2024