8.7
Élevée
CVE-2026-44107 A reboot of the charging controller can be triggered via Modbus TCP without authentication
Description
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CHARX SEC-3150 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3100 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3050 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
| CHARX SEC-3000 1.0 | 1.0.0 → < 1.9.1 | 1.9.1 |
Autres CVE de CHARX SEC-3150
Les 51 CVE de CHARX SEC-3150 →
CVE-2026-7849
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command…
9.3
Critique
CVE-2026-44108
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system…
9.3
Critique
CVE-2026-44105
The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local…
5.8
Moyenne
CVE-2026-44106
A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to…
8.5
Élevée