CHARX SEC-3150
- Software type
- Industrial device
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/07/2026, CHARX SEC-3150 recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of CHARX SEC-3150 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-7849Command Injection in SCM (idledisconnect parameter)CVE-2026-44108Firewall bypass during shutdownCVE-2026-44107Exposed Reboot via ModbusCVE-2026-44106Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website fileCVE-2026-44105Cleartext password in logs| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-7849Command Injection in SCM (idledisconnect parameter) | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2026-44108Firewall bypass during shutdown | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-44107Exposed Reboot via Modbus | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44106Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44105Cleartext password in logs | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityMedium |
|---|
CVE-2026-44104ControllerAgent does not perform validation of firmware | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-44103JupiCore does not perform validation of firmware | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityMedium |
|---|
CVE-2026-44102OCPP Firmware download is not properly locked | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityMedium |
|---|
CVE-2026-44101OCPP reconfiguration vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-44100JupiCore charging point reconfiguration without auth | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44099Local Privilege Escalation via pppd password injection | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44098OS Command Injection in OCPP Agent via charge_box_id | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44097File Upload vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityMedium |
|---|
CVE-2026-44096udhcpc Privilege Escalation | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44095Local Privilege Escalation via Network scripts | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44094Fallback to second RAUC slot with default credentials | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44093Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44092Missing input validation / stripping of CRLF characters in SystemConfigManager | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44091Creation of a new configuration by posting a malicious ID to MQTT | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-44090Missing authentication for MQTT Broker | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityCritical |
|---|
CVE-2026-41032Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers | Exploitation statusNot exploited | FixYes | Published06/03/2026 | SeverityHigh |
|---|
CVE-2025-41699Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers | Exploitation statusNot exploited | FixYes | Published10/14/2025 | SeverityHigh |
|---|
CVE-2025-25271OCPP Backend Configuration via Insecure Defaults | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-25270Remote Code Execution via Unauthenticated Configuration Manipulation | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityCritical |
|---|
CVE-2025-25269Local Privilege Escalation via Unauthenticated Command Injection | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-25268Unauthenticated Configuration Access via Exposed API Endpoint | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-24006Privilege Escalation via Insecure SSH Permissions | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-24005Local Privilege Escalation via Vulnerable SSH Script | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-24004USB-C Buffer Overflow via Display Interface in EV Charging Stations | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityMedium |
|---|
CVE-2025-24003MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityHigh |
|---|
CVE-2025-24002MQTT DoS Vulnerability in German EV Charging Stations | Exploitation statusNot exploited | FixYes | Published07/08/2025 | SeverityMedium |
|---|
CVE-2024-11497Phoenix Contact: CHARX-SEC3xxx Charge controllers vulnerable to privilege escalation | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2024-6788Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password | Exploitation statusNot exploited | FixYes | Published08/13/2024 | SeverityHigh |
|---|
CVE-2024-28137PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series | Exploitation statusNot exploited | FixYes | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28136PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service | Exploitation statusNot exploited | FixYes | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28135PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series | Exploitation statusNot exploited | FixYes | Published05/14/2024 | SeverityMedium |
|---|
CVE-2024-28134PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series | Exploitation statusNot exploited | FixYes | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-28133PHOENIX CONTACT: Privilege escalation in CHARX Series | Exploitation statusNot exploited | FixYes | Published05/14/2024 | SeverityHigh |
|---|
CVE-2024-26288PHOENIX CONTACT: Lack of SSL support in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26005PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-26004PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26003PHOENIX CONTACT: DoS of the control agent in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26002PHOENIX CONTACT: File ownership manipulation in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26001PHOENIX CONTACT: Out of bounds write only memory access | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-26000PHOENIX CONTACT: Out of bounds read only memory access | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25999PHOENIX CONTACT: Privilege escalation in the OCPP agent service | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-25998PHOENIX CONTACT: Command injection in the OCPP Service | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityHigh |
|---|
CVE-2024-25997PHOENIX CONTACT: Log injection in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25996PHOENIX CONTACT: Remote code execution due to an origin validation error in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityMedium |
|---|
CVE-2024-25995PHOENIX CONTACT: Remote code execution in CHARX Series | Exploitation statusNot exploited | FixYes | Published03/12/2024 | SeverityCritical |
|---|
51 Results | Page 1 of 2