CVE-2024-11497 An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access

Description

An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access.

Affected products and versions

Product	Affected versions	Fixed in
CHARX SEC-3000 1.7	earliest → < 1.7.0	1.7.0
CHARX SEC-3050 1.7	earliest → < 1.7.0	1.7.0
CHARX SEC-3100 1.7	earliest → < 1.7.0	1.7.0
CHARX SEC-3150 1.7	earliest → < 1.7.0	1.7.0

Other CVEs of CHARX SEC-3000

The 51 CVEs of CHARX SEC-3000 →

CVE-2026-7849 Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command… 9.3 Critical CVE-2026-44108 Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system… 9.3 Critical CVE-2026-44107 A reboot of the charging controller can be triggered via Modbus TCP without authentication 8.7 High CVE-2026-44105 The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local… 5.8 Medium