CVE-2024-26003

Summary

An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality. 

Affected Software

VendorProductVersion RangeStatus
PHOENIX CONTACTCHARX SEC-30000 <= 1.5.0affected
PHOENIX CONTACTCHARX SEC-30500 <= 1.5.0affected
PHOENIX CONTACTCHARX SEC-31000 <= 1.5.0affected
PHOENIX CONTACTCHARX SEC-31500 <= 1.5.0affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References