Aller au contenu

Vulnérabilités connues pour phoenixcontact charx_sec_3000

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-3913 An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable… 5.9 Moyenne 13 août 2024
CVE-2024-28137 A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU… 7.8 Élevée 14 mai 2024
CVE-2024-28136 A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper… 7.8 Élevée 14 mai 2024
CVE-2024-28135 A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code… 5.0 Moyenne 14 mai 2024
CVE-2024-28134 An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access… 7.0 Élevée 14 mai 2024
CVE-2024-28133 A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges.  7.8 Élevée 14 mai 2024
CVE-2024-26288 An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a… 8.7 Élevée 12 mars 2024
CVE-2024-26004 An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or… 7.5 Élevée 12 mars 2024
CVE-2024-26003 An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt… 7.5 Élevée 12 mars 2024
CVE-2024-26002 An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by… 7.8 Élevée 12 mars 2024
CVE-2024-26001 An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack 7.4 Élevée 12 mars 2024
CVE-2024-25998 An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to… 7.3 Élevée 12 mars 2024
CVE-2024-25997 An unauthenticated remote attacker can perform a log injection due to improper input validation 5.3 Moyenne 12 mars 2024
CVE-2024-25996 An unauthenticated remote attacker can perform a remote code execution due to an origin validation error 5.3 Moyenne 12 mars 2024
CVE-2024-25995 An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or… 9.8 Critique 12 mars 2024
CVE-2024-25994 An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload… 5.3 Moyenne 12 mars 2024

Autres produits phoenixcontact