7.0
Élevée
CVE-2024-28134 An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access…
Description
An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but the availability can be seriously affected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CHARX SEC-3000 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| CHARX SEC-3050 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| CHARX SEC-3100 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| CHARX SEC-3150 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| charx_sec_3000 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| charx_sec_3100 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| charx_sec_3150 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
| charx_sec_3050 1.5 | premières → 1.5.1 | Pas de correctif indiqué |
Autres CVE de CHARX SEC-3000
Les 51 CVE de CHARX SEC-3000 →
CVE-2026-7849
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command…
9.3
Critique
CVE-2026-44108
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system…
9.3
Critique
CVE-2026-44107
A reboot of the charging controller can be triggered via Modbus TCP without authentication
8.7
Élevée
CVE-2026-44105
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local…
5.8
Moyenne