CS
Product
CHARX SEC-3100
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 10Medium 3Low 0
Watch
Add CHARX SEC-3100 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7849 | 9.8 | Jul 30 | Command Injection in SCM (idledisconnect parameter) Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44108 | 9.8 | Jul 30 | Firewall bypass during shutdown Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44104 | 9.8 | Jul 30 | ControllerAgent does not perform validation of firmware Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44101 | 9.8 | Jul 30 | OCPP reconfiguration vulnerability Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44090 | 9.8 | Jul 30 | Missing authentication for MQTT Broker Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44100 | 9.4 | Jul 30 | JupiCore charging point reconfiguration without auth Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44092 | 9.1 | Jul 30 | Missing input validation / stripping of CRLF characters in SystemConfigManager Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44091 | 9.1 | Jul 30 | Creation of a new configuration by posting a malicious ID to MQTT Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44098 | 8.6 | Jul 30 | OS Command Injection in OCPP Agent via charge_box_id Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44094 | 8.6 | Jul 30 | Fallback to second RAUC slot with default credentials Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44106 | 7.8 | Jul 30 | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44099 | 7.8 | Jul 30 | Local Privilege Escalation via pppd password injection Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44096 | 7.8 | Jul 30 | udhcpc Privilege Escalation Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44095 | 7.8 | Jul 30 | Local Privilege Escalation via Network scripts Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44093 | 7.8 | Jul 30 | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44107 | 7.5 | Jul 30 | Exposed Reboot via Modbus Affected: 1.0.0 before 1.9.1 |
| CVE-2026-41032 | 7.5 | Jun 3 | Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers Affected: 1.0.0 before 1.9.0 |
| CVE-2026-44097 | 7.1 | Jul 30 | File Upload vulnerability Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44105 | 6.6 | Jul 30 | Cleartext password in logs Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44103 | 5.3 | Jul 30 | JupiCore does not perform validation of firmware Affected: 1.0.0 before 1.9.1 |
| CVE-2026-44102 | 5.3 | Jul 30 | OCPP Firmware download is not properly locked Affected: 1.0.0 before 1.9.1 |
Showing 21