Vulnerabilities > CVE-2024-3913 - Files or Directories Accessible to External Parties vulnerability in Phoenixcontact products

CVSS 5.3 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

high complexity

phoenixcontact

CWE-552

NVD

Published: 2024-08-13

Updated: 2024-09-13

Summary

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.

Vulnerable Configurations

Part	Description	Count
OS	Phoenixcontact Phoenixcontact Charx SEC 3150 Firmware - Phoenixcontact Charx SEC 3150 Firmware 1.2.1 Phoenixcontact Charx SEC 3150 Firmware 1.3.0 Phoenixcontact Charx SEC 3150 Firmware 1.3.3 Phoenixcontact Charx SEC 3150 Firmware 1.4.1 Phoenixcontact Charx SEC 3150 Firmware 1.4.2 Phoenixcontact Charx SEC 3150 Firmware 1.5.0 Phoenixcontact Charx SEC 3150 Firmware 1.5.2 Phoenixcontact Charx SEC 3150 Firmware 1.6.2 Phoenixcontact Charx SEC 3100 Firmware - Phoenixcontact Charx SEC 3100 Firmware 1.2.1 Phoenixcontact Charx SEC 3100 Firmware 1.3.0 Phoenixcontact Charx SEC 3100 Firmware 1.3.3 Phoenixcontact Charx SEC 3100 Firmware 1.4.1 Phoenixcontact Charx SEC 3100 Firmware 1.4.2 Phoenixcontact Charx SEC 3100 Firmware 1.5.0 Phoenixcontact Charx SEC 3100 Firmware 1.5.2 Phoenixcontact Charx SEC 3100 Firmware 1.6.2 Phoenixcontact Charx SEC 3050 Firmware - Phoenixcontact Charx SEC 3050 Firmware 1.2.1 Phoenixcontact Charx SEC 3050 Firmware 1.3.0 Phoenixcontact Charx SEC 3050 Firmware 1.3.3 Phoenixcontact Charx SEC 3050 Firmware 1.4.1 Phoenixcontact Charx SEC 3050 Firmware 1.4.2 Phoenixcontact Charx SEC 3050 Firmware 1.5.0 Phoenixcontact Charx SEC 3050 Firmware 1.5.2 Phoenixcontact Charx SEC 3050 Firmware 1.6.2 Phoenixcontact Charx SEC 3000 Firmware - Phoenixcontact Charx SEC 3000 Firmware 1.2.1 Phoenixcontact Charx SEC 3000 Firmware 1.3.0 Phoenixcontact Charx SEC 3000 Firmware 1.3.3 Phoenixcontact Charx SEC 3000 Firmware 1.4.1 Phoenixcontact Charx SEC 3000 Firmware 1.4.2 Phoenixcontact Charx SEC 3000 Firmware 1.5.0 Phoenixcontact Charx SEC 3000 Firmware 1.5.2 Phoenixcontact Charx SEC 3000 Firmware 1.6.2	36
Hardware	Phoenixcontact Phoenixcontact Charx SEC 3150 - Phoenixcontact Charx SEC 3100 - Phoenixcontact Charx SEC 3050 - Phoenixcontact Charx SEC 3000 -	4

Common Weakness Enumeration (CWE)

CWE-552 - Files or Directories Accessible to External Parties

References

https://cert.vde.com/en/advisories/VDE-2024-022