Výsledky hledání

Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

[VDE-2026-008] Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a complete loss of confidentiality, integrity, and availability.

EPSS 0.02 a dalších 3 CVE-2026-44093 CVE-2026-44094 CVE-2026-44095 CVE-2026-44096 CVE-2026-44097 CVE-2026-44098 CVE-2026-44099 CVE-2026-44100 CVE-2026-44101 CVE-2026-44102 CVE-2026-44103 CVE-2026-44104 CVE-2026-44105 CVE-2026-44106 CVE-2026-44107 CVE-2026-44108 CVE-2026-7849 Phoenix Contact energetika doprava DE

tg: zranitelnost tp: průmyslové systémy

30. 7. 2026 12:00 · CERT@VDE · Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to modify configuration on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2026-44101.

EPSS 0.01 CVSS 5.0 CVE-2026-44101 Phoenix Contact energetika US

30. 7. 2026 · Zero Day Initiative · ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability