Product by PHOENIX CONTACT
Charx Sec-3050 Firmware
29 known vulnerabilities in Charx Sec-3050 Firmware (PHOENIX CONTACT), 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-25995 | PHOENIX CONTACT: Remote code execution in CHARX Series | 9.8 | |
| High | CVE-2024-25998 | PHOENIX CONTACT: Command injection in the OCPP Service | 7.3 | |
| Critical | CVE-2025-25270 | Remote Code Execution via Unauthenticated Configuration Manipulation | 9.8 | |
| High | CVE-2024-26003 | PHOENIX CONTACT: DoS of the control agent in CHARX Series | 7.5 | |
| High | CVE-2024-26004 | PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series | 7.5 | |
| Critical | CVE-2024-26001 | PHOENIX CONTACT: Out of bounds write only memory access | 7.4 | |
| Medium | CVE-2024-28135 | PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series | 5.0 | |
| High | CVE-2024-28136 | PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service | 7.8 | |
| Critical | CVE-2024-6788 | PHOENIX CONTACT CHARX: Use of Default Credentials | 8.6 | |
| High | CVE-2025-25268 | Unauthenticated Configuration Access via Exposed API Endpoint | 8.8 | |
| High | CVE-2025-24003 | MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations | 8.2 | |
| High | CVE-2024-26000 | PHOENIX CONTACT: Out of bounds read only memory access | 5.9 | |
| High | CVE-2025-25271 | OCPP Backend Configuration via Insecure Defaults | 8.8 | |
| High | CVE-2024-25999 | PHOENIX CONTACT: Privilege escalation in the OCPP agent service | 8.4 | |
| High | CVE-2025-25269 | Local Privilege Escalation via Unauthenticated Command Injection | 8.4 | |
| Medium | CVE-2024-25994 | PHOENIX CONTACT: Unintended script file upload in CHARX Series | 5.3 | |
| High | CVE-2024-28134 | PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series | 7.0 | |
| Medium | CVE-2024-25997 | PHOENIX CONTACT: Log injection in CHARX Series | 5.3 | |
| High | CVE-2024-26288 | PHOENIX CONTACT: Lack of SSL support in CHARX Series | 8.7 | |
| High | CVE-2024-28133 | PHOENIX CONTACT: Privilege escalation in CHARX Series | 7.8 | |
| Medium | CVE-2024-3913 | Phoenix Contact: Start sequence allows attack during the boot process | 5.9 | |
| High | CVE-2025-24005 | Local Privilege Escalation via Vulnerable SSH Script | 7.8 | |
| High | CVE-2025-24006 | Privilege Escalation via Insecure SSH Permissions | 7.8 | |
| Medium | CVE-2024-26005 | PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series | 4.8 | |
| Medium | CVE-2025-24002 | MQTT DoS Vulnerability in German EV Charging Stations | 5.3 |