9.3
Critical
CVE-2026-44101 Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure…
Description
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CHARX SEC-3150 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3100 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3050 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3000 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
Other CVEs of CHARX SEC-3150
The 51 CVEs of CHARX SEC-3150 →
CVE-2026-7849
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command…
9.3
Critical
CVE-2026-44108
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system…
9.3
Critical
CVE-2026-44107
A reboot of the charging controller can be triggered via Modbus TCP without authentication
8.7
High
CVE-2026-44105
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local…
5.8
Medium