CS
Product
CHARX SEC-3000
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 17Medium 5Low 0
Watch
Add CHARX SEC-3000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41699 | 8.8 | Oct 14 | Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers Affected: 0.0.0 before 1.7.4 |
| CVE-2025-25271 | 8.8 | Jul 8 | OCPP Backend Configuration via Insecure Defaults Affected: 0.0.0 before 1.7.3 |
| CVE-2025-25268 | 8.8 | Jul 8 | Unauthenticated Configuration Access via Exposed API Endpoint Affected: 0.0.0 before 1.7.3 |
| CVE-2026-44098 | 8.6 | Jul 30 | OS Command Injection in OCPP Agent via charge_box_id Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44094 | 8.6 | Jul 30 | Fallback to second RAUC slot with default credentials Affected: 1.0.0 before 1.9.1 |
| CVE-2025-25269 | 8.4 | Jul 8 | Local Privilege Escalation via Unauthenticated Command Injection Affected: 0.0.0 before 1.7.3 |
| CVE-2025-24003 | 8.2 | Jul 8 | MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations Affected: 0.0.0 through 1.6.5 |
| CVE-2026-44106 | 7.8 | Jul 30 | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44099 | 7.8 | Jul 30 | Local Privilege Escalation via pppd password injection Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44096 | 7.8 | Jul 30 | udhcpc Privilege Escalation Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44095 | 7.8 | Jul 30 | Local Privilege Escalation via Network scripts Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44093 | 7.8 | Jul 30 | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script Affected: 1.0.0 before 1.9.1 |
| CVE-2025-24006 | 7.8 | Jul 8 | Privilege Escalation via Insecure SSH Permissions Affected: 0.0.0 before 1.7.3 |
| CVE-2025-24005 | 7.8 | Jul 8 | Local Privilege Escalation via Vulnerable SSH Script Affected: 0.0.0 before 1.7.3 |
| CVE-2026-44107 | 7.5 | Jul 30 | Exposed Reboot via Modbus Affected: 1.0.0 before 1.9.1 |
| CVE-2026-41032 | 7.5 | Jun 3 | Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers Affected: 1.0.0 before 1.9.0 |
| CVE-2026-44097 | 7.1 | Jul 30 | File Upload vulnerability Affected: 1.0.0 before 1.9.1 |
Showing 17