Vulnerabilities > CVE-2024-25996 - Unspecified vulnerability in Phoenixcontact products

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2024-03-12

Updated: 2025-01-23

Summary

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.

Part	Description	Count
OS	Phoenixcontact Phoenixcontact Charx SEC 3000 Firmware - Phoenixcontact Charx SEC 3000 Firmware 1.2.1 Phoenixcontact Charx SEC 3000 Firmware 1.3.0 Phoenixcontact Charx SEC 3000 Firmware 1.3.3 Phoenixcontact Charx SEC 3000 Firmware 1.4.1 Phoenixcontact Charx SEC 3000 Firmware 1.4.2 Phoenixcontact Charx SEC 3000 Firmware 1.5.0 Phoenixcontact Charx SEC 3050 Firmware - Phoenixcontact Charx SEC 3050 Firmware 1.2.1 Phoenixcontact Charx SEC 3050 Firmware 1.3.0 Phoenixcontact Charx SEC 3050 Firmware 1.3.3 Phoenixcontact Charx SEC 3050 Firmware 1.4.1 Phoenixcontact Charx SEC 3050 Firmware 1.4.2 Phoenixcontact Charx SEC 3050 Firmware 1.5.0 Phoenixcontact Charx SEC 3100 Firmware - Phoenixcontact Charx SEC 3100 Firmware 1.2.1 Phoenixcontact Charx SEC 3100 Firmware 1.3.0 Phoenixcontact Charx SEC 3100 Firmware 1.3.3 Phoenixcontact Charx SEC 3100 Firmware 1.4.1 Phoenixcontact Charx SEC 3100 Firmware 1.4.2 Phoenixcontact Charx SEC 3100 Firmware 1.5.0 Phoenixcontact Charx SEC 3150 Firmware - Phoenixcontact Charx SEC 3150 Firmware 1.2.1 Phoenixcontact Charx SEC 3150 Firmware 1.3.0 Phoenixcontact Charx SEC 3150 Firmware 1.3.3 Phoenixcontact Charx SEC 3150 Firmware 1.4.1 Phoenixcontact Charx SEC 3150 Firmware 1.4.2 Phoenixcontact Charx SEC 3150 Firmware 1.5.0	28
Hardware	Phoenixcontact Phoenixcontact Charx SEC 3000 - Phoenixcontact Charx SEC 3050 - Phoenixcontact Charx SEC 3100 - Phoenixcontact Charx SEC 3150 -	4