Výsledky hledání

Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

[VDE-2026-008] Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a complete loss of confidentiality, integrity, and availability.

EPSS 0.02 a dalších 3 CVE-2026-44093 CVE-2026-44094 CVE-2026-44095 CVE-2026-44096 CVE-2026-44097 CVE-2026-44098 CVE-2026-44099 CVE-2026-44100 CVE-2026-44101 CVE-2026-44102 CVE-2026-44103 CVE-2026-44104 CVE-2026-44105 CVE-2026-44106 CVE-2026-44107 CVE-2026-44108 CVE-2026-7849 Phoenix Contact energetika doprava DE

tg: zranitelnost tp: průmyslové systémy

30. 7. 2026 12:00 · CERT@VDE · Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers

ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-44106.

EPSS 0.00 CVSS 7.8 CVE-2026-44106 Phoenix Contact výroba a průmysl US

30. 7. 2026 · Zero Day Initiative · ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability