CHARX SEC-3100
PHOENIX CONTACT- Product type
- Other
- Catalog vulnerabilities
- 51
Severity across 51 analyzed records
en
Severity across 51 analyzed records
Verify to analyze this security profile
As of 09/16/2026, within CyStack's analyzed data, CHARX SEC-3100 has 20 security vulnerabilities published in the last 90 days. Of these, 16 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of CHARX SEC-3100 and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-7849Command Injection in SCM (idledisconnect parameter) | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-44108Firewall bypass during shutdown | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-44107Exposed Reboot via Modbus | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44105Cleartext password in logs | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-44106Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44104ControllerAgent does not perform validation of firmware | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-44103JupiCore does not perform validation of firmware | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-44102OCPP Firmware download is not properly locked | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-44101OCPP reconfiguration vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-44100JupiCore charging point reconfiguration without auth | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44099Local Privilege Escalation via pppd password injection | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44098OS Command Injection in OCPP Agent via charge_box_id | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44097File Upload vulnerability | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-44096udhcpc Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44095Local Privilege Escalation via Network scripts | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44094Fallback to second RAUC slot with default credentials | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44093Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44092Missing input validation / stripping of CRLF characters in SystemConfigManager | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44091Creation of a new configuration by posting a malicious ID to MQTT | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-44090Missing authentication for MQTT Broker | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityCritical |
CVE-2026-41032Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers | Exploitation statusNot known exploited | FixYes | Published06/03/2026 | SeverityHigh |
CVE-2025-41699Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-25271OCPP Backend Configuration via Insecure Defaults | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-25270Remote Code Execution via Unauthenticated Configuration Manipulation | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityCritical |
CVE-2025-25269Local Privilege Escalation via Unauthenticated Command Injection | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-25268Unauthenticated Configuration Access via Exposed API Endpoint | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-24006Privilege Escalation via Insecure SSH Permissions | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-24005Local Privilege Escalation via Vulnerable SSH Script | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-24004USB-C Buffer Overflow via Display Interface in EV Charging Stations | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityMedium |
CVE-2025-24003MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-24002MQTT DoS Vulnerability in German EV Charging Stations | Exploitation statusNot known exploited | FixYes | Published07/08/2025 | SeverityMedium |
CVE-2024-11497Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation | Exploitation statusNot known exploited | FixYes | Published01/14/2025 | SeverityHigh |
CVE-2024-6788Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password | Exploitation statusNot known exploited | FixYes | Published08/13/2024 | SeverityHigh |
CVE-2024-28137PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series | Exploitation statusNot known exploited | FixYes | Published05/14/2024 | SeverityHigh |
CVE-2024-28136PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service | Exploitation statusNot known exploited | FixYes | Published05/14/2024 | SeverityHigh |
CVE-2024-28135PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series | Exploitation statusNot known exploited | FixYes | Published05/14/2024 | SeverityMedium |
CVE-2024-28134PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series | Exploitation statusNot known exploited | FixYes | Published05/14/2024 | SeverityHigh |
CVE-2024-28133PHOENIX CONTACT: Privilege escalation in CHARX Series | Exploitation statusNot known exploited | FixYes | Published05/14/2024 | SeverityHigh |
CVE-2024-26288PHOENIX CONTACT: Lack of SSL support in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-26005PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityMedium |
CVE-2024-26004PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-26003PHOENIX CONTACT: DoS of the control agent in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-26002PHOENIX CONTACT: File ownership manipulation in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-26001PHOENIX CONTACT: Out of bounds write only memory access | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-26000PHOENIX CONTACT: Out of bounds read only memory access | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityMedium |
CVE-2024-25999PHOENIX CONTACT: Privilege escalation in the OCPP agent service | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-25998PHOENIX CONTACT: Command injection in the OCPP Service | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityHigh |
CVE-2024-25997PHOENIX CONTACT: Log injection in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityMedium |
CVE-2024-25996PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityMedium |
CVE-2024-25995PHOENIX CONTACT: Remote code execution in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityCritical |
CVE-2024-25994PHOENIX CONTACT: Unintended script file upload in CHARX Series | Exploitation statusNot known exploited | FixYes | Published03/12/2024 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan