8.6
Élevée
CVE-2024-6788 A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the…
Description
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CHARX SEC-3000 1.6 | premières → < 1.6.3 | 1.6.3 |
| CHARX SEC-3050 1.6 | premières → < 1.6.3 | 1.6.3 |
| CHARX SEC-3100 1.6 | premières → < 1.6.3 | 1.6.3 |
| CHARX SEC-3150 1.6 | premières → < 1.6.3 | 1.6.3 |
| charx_sec_3150 1.6 | premières → < 1.6.3 | 1.6.3 |
Autres CVE de CHARX SEC-3000
Les 51 CVE de CHARX SEC-3000 →
CVE-2026-7849
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command…
9.3
Critique
CVE-2026-44108
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system…
9.3
Critique
CVE-2026-44107
A reboot of the charging controller can be triggered via Modbus TCP without authentication
8.7
Élevée
CVE-2026-44105
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local…
5.8
Moyenne