Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

PHOENIX CONTACT Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-27565`Remote code execution via uploading a malicious IODD file	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityCritical
`CVE-2026-27564`Command Injection via PUT in /api/datastorage/data	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27563`Command Injection via GET in /api/datastorage/data	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27562`Command Injection via PUT in /api/iodd/config	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27561`Command Injection via GET in /api/iodd/config	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27560`Command Injection via DELETE in /api/status/data	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27559`Command Injection via GET in /api/status/data	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27558`Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27557`Path Traversal in /index.php/view_uploaded_iodd_file	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27556`Local File Inclusion in /index.php/ajax/save_iodd_parameters	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27555`Local File Inclusion in /index.php/ajax/get_iodd_port_info	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27554`Command Injection in /index.php/ajax/save_iodd_parameters	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27553`Information Disclosure via Schema Path Manipulation	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityMedium
`CVE-2026-27552`Unauthorized IODD File Upload due to Improper Authorization	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27551`Command Injection in /index.php/ajax/parameterManage	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27550`Command Injection in Field_Shadow_Password Class	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27549`Command Injection in /index.php/attached_devices_tab/do_upload	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27548`Command Injection in /index.php/ajax/get_iodd_port_info	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27547`Command Injection in /index.php/ajax/get_iodd_menu_info	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityHigh
`CVE-2026-27546`Authentication Bypass in _account_log	Exploitation statusNot confirmed	FixYes	Affected productIOL MA8 PN DI8	Published09/16/2026	SeverityCritical
`CVE-2025-41771`SQL injection	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published08/12/2026	SeverityMedium
`CVE-2025-41770`Unauthenticated Denial of Service	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published08/12/2026	SeverityHigh
`CVE-2025-41769`Unauthenticated Buffer Overflow in PROFINET Service	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published08/12/2026	SeverityCritical
`CVE-2026-7849`Command Injection in SCM (idledisconnect parameter)	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityCritical
`CVE-2026-44108`Firewall bypass during shutdown	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityCritical
`CVE-2026-44107`Exposed Reboot via Modbus	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44105`Cleartext password in logs	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityMedium
`CVE-2026-44106`Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44104`ControllerAgent does not perform validation of firmware	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityCritical
`CVE-2026-44103`JupiCore does not perform validation of firmware	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityMedium
`CVE-2026-44102`OCPP Firmware download is not properly locked	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityMedium
`CVE-2026-44101`OCPP reconfiguration vulnerability	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityCritical
`CVE-2026-44100`JupiCore charging point reconfiguration without auth	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44099`Local Privilege Escalation via pppd password injection	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44098`OS Command Injection in OCPP Agent via charge_box_id	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44097`File Upload vulnerability	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityMedium
`CVE-2026-44096`udhcpc Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44095`Local Privilege Escalation via Network scripts	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44094`Fallback to second RAUC slot with default credentials	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44093`Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44092`Missing input validation / stripping of CRLF characters in SystemConfigManager	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44091`Creation of a new configuration by posting a malicious ID to MQTT	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityHigh
`CVE-2026-44090`Missing authentication for MQTT Broker	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/30/2026	SeverityCritical
`CVE-2026-41032`Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published06/03/2026	SeverityHigh
`CVE-2025-41669`Insufficient Verification of Data Authenticity	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published05/27/2026	SeverityHigh
`CVE-2025-41670`Untrusted Search Path	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published05/27/2026	SeverityHigh
`CVE-2024-43384`Phoenix Contact: Improper removal of sensitive information in MGUARD products	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published05/07/2026	SeverityHigh
`CVE-2026-22323`Cross‑Site Request Forgery in Link Aggregation Configuration	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityHigh
`CVE-2026-22322`Stored Cross‑Site Scripting in Link Aggregation Name Handling	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityHigh
`CVE-2026-22321`Stack-Based Buffer Overflow in CLI Login Username Handling over CLI	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityMedium
`CVE-2026-22320`Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityMedium
`CVE-2026-22319`Stack-Based Buffer Overflow in File Install Parameter Handling	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityMedium
`CVE-2026-22318`Stack-Based Buffer Overflow in File Transfer Parameter Handling	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityMedium
`CVE-2026-22317`Command Injection Vulnerability in Root CA Certificate Transfer Workflow	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityHigh
`CVE-2026-22316`Buffer Overflow using TFTP Filename	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published03/18/2026	SeverityMedium
`CVE-2025-41717`Config-Upload Code Injection	Exploitation statusNot known exploited	FixYes	Affected productTC ROUTER 3002T-3G	Published01/13/2026	SeverityHigh
`CVE-2025-41693`Authenticated Denial-of-Service via SSH	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityMedium
`CVE-2025-41696`Hardcoded User Password	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityMedium
`CVE-2025-41694`Authenticated Denial-of-Service via Webshell	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityMedium
`CVE-2025-41692`Weak/Predictable root Password	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityMedium
`CVE-2025-41697`Shell access to UART Console	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityMedium
`CVE-2025-41695`Reflected XSS vulnerability in dyn_conn.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41745`Reflected XSS vulnerability in pxc_portCntr2.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41746`Reflected XSS vulnerability in pxc_portSecCfg.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41747`Reflected XSS vulnerability in pxc_vlanIntfCfg.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41748`Reflected XSS vulnerability in pxc_Dot1xCfg.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41749`Reflected XSS vulnerability in port_util.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41750`Reflected XSS vulnerability in pxc_PortCfg.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41751`Reflected XSS vulnerability in pxc_portCntr.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41752`Reflected XSS vulnerability in pxc_portSfp.php	Exploitation statusNot known exploited	FixYes	Affected productFL SWITCH 2005	Published12/09/2025	SeverityHigh
`CVE-2025-41699`Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published10/14/2025	SeverityHigh
`CVE-2025-41707`Phoenix Contact: WebSocket Handler Denial of Service	Exploitation statusNot known exploited	FixYes	Affected productQUINT4-UPS/24DC/24DC/5/EIP	Published10/14/2025	SeverityMedium
`CVE-2025-41706`Phoenix Contact: Webserver Denial of Service through Malformed Content-Length	Exploitation statusNot known exploited	FixYes	Affected productQUINT4-UPS/24DC/24DC/5/EIP	Published10/14/2025	SeverityMedium
`CVE-2025-41705`Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials	Exploitation statusNot known exploited	FixYes	Affected productQUINT4-UPS/24DC/24DC/5/EIP	Published10/14/2025	SeverityMedium
`CVE-2025-41704`Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code	Exploitation statusNot known exploited	FixYes	Affected productQUINT4-UPS/24DC/24DC/5/EIP	Published10/14/2025	SeverityMedium
`CVE-2025-41703`Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command	Exploitation statusNot known exploited	FixYes	Affected productQUINT4-UPS/24DC/24DC/5/EIP	Published10/14/2025	SeverityHigh
`CVE-2025-41686`Improper File Permissions Allow Local Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productDaUM	Published08/12/2025	SeverityHigh
`CVE-2025-2813`HTTP Service DoS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productAXL F BK PN TPS	Published07/31/2025	SeverityHigh
`CVE-2025-41668`Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published07/08/2025	SeverityHigh
`CVE-2025-41667`Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published07/08/2025	SeverityHigh
`CVE-2025-41666`Phoenix Contact: File access due to the replacement of a critical file used by the watchdog	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published07/08/2025	SeverityHigh
`CVE-2025-41665`Phoenix Contact: DoS of the PLC due to incorrect default permissions possible	Exploitation statusNot known exploited	FixYes	Affected productAXC F 1152	Published07/08/2025	SeverityMedium
`CVE-2025-25271`OCPP Backend Configuration via Insecure Defaults	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-25270`Remote Code Execution via Unauthenticated Configuration Manipulation	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityCritical
`CVE-2025-25269`Local Privilege Escalation via Unauthenticated Command Injection	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-25268`Unauthenticated Configuration Access via Exposed API Endpoint	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-24006`Privilege Escalation via Insecure SSH Permissions	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-24005`Local Privilege Escalation via Vulnerable SSH Script	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-24004`USB-C Buffer Overflow via Display Interface in EV Charging Stations	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityMedium
`CVE-2025-24003`MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityHigh
`CVE-2025-24002`MQTT DoS Vulnerability in German EV Charging Stations	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3150	Published07/08/2025	SeverityMedium
`CVE-2018-25112`PHOENIX CONTACT: ILC 1x1 ETH Denial of Service	Exploitation statusNot known exploited	FixNot confirmed	Affected productILC 131	Published06/04/2025	SeverityHigh
`CVE-2024-11497`Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation	Exploitation statusNot known exploited	FixYes	Affected productCHARX SEC-3000	Published01/14/2025	SeverityHigh
`CVE-2024-43393`Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43392`Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43391`Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43390`Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43389`Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43388`Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh
`CVE-2024-43387`Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices	Exploitation statusNot known exploited	FixYes	Affected productFL MGUARD 2102	Published09/10/2024	SeverityHigh