Product by Phoenix Contact
Charx Sec-3150
51 known vulnerabilities in Charx Sec-3150 (Phoenix Contact), 0 of them actively exploited (CISA KEV).
Key figures
51
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-44098 | OS Command Injection in OCPP Agent via charge_box_id | 8.6 | |
| Critical | CVE-2026-44108 | Firewall bypass during shutdown | 9.8 | |
| Critical | CVE-2024-25995 | PHOENIX CONTACT: Remote code execution in CHARX Series | 9.8 | |
| Critical | CVE-2026-7849 | Command Injection in SCM (idledisconnect parameter) | 9.8 | |
| Critical | CVE-2026-44101 | OCPP reconfiguration vulnerability | 9.8 | |
| Critical | CVE-2026-44090 | Missing authentication for MQTT Broker | 9.8 | |
| Critical | CVE-2026-44092 | Missing input validation / stripping of CRLF characters in SystemConfigManager | 9.1 | |
| Critical | CVE-2026-44091 | Creation of a new configuration by posting a malicious ID to MQTT | 9.1 | |
| High | CVE-2024-25998 | PHOENIX CONTACT: Command injection in the OCPP Service | 7.3 | |
| Critical | CVE-2026-44100 | JupiCore charging point reconfiguration without auth | 9.4 | |
| Critical | CVE-2025-25270 | Remote Code Execution via Unauthenticated Configuration Manipulation | 9.8 | |
| High | CVE-2025-41699 | Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers | 8.8 | |
| High | CVE-2026-44107 | Exposed Reboot via Modbus | 7.5 | |
| Critical | CVE-2026-44104 | ControllerAgent does not perform validation of firmware | 9.8 | |
| High | CVE-2024-26003 | PHOENIX CONTACT: DoS of the control agent in CHARX Series | 7.5 | |
| High | CVE-2026-44094 | Fallback to second RAUC slot with default credentials | 8.6 | |
| High | CVE-2024-26004 | PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | 7.5 | |
| Critical | CVE-2024-26001 | PHOENIX CONTACT: Out of bounds write only memory access | 7.4 | |
| Medium | CVE-2024-28135 | PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series | 5.0 | |
| High | CVE-2024-28136 | PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service | 7.8 | |
| High | CVE-2026-44097 | File Upload vulnerability | 7.1 | |
| Medium | CVE-2026-44103 | JupiCore does not perform validation of firmware | 5.3 | |
| High | CVE-2026-44106 | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file | 7.8 | |
| High | CVE-2026-44093 | Phoenix Contact CHARX: OS Command Injection | 7.8 | |
| High | CVE-2026-44099 | Local Privilege Escalation via pppd password injection | 7.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,