Skip to content

Known vulnerabilities in Phoenix Contact CHARX SEC-3150

Is your version affected?

CVE Summary Score Published
CVE-2026-7849 Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command… 9.3 Critical Jul 30, 2026
CVE-2026-44108 Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system… 9.3 Critical Jul 30, 2026
CVE-2026-44104 The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without… 9.3 Critical Jul 30, 2026
CVE-2026-44101 Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure… 9.3 Critical Jul 30, 2026
CVE-2026-44090 Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected… 9.3 Critical Jul 30, 2026
CVE-2025-25270 An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with… 9.8 Critical Jul 8, 2025
CVE-2024-25995 An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or… 9.8 Critical Mar 12, 2024

Other Phoenix Contact products