PH
Vendor
Phoenixcontact
2,251
CVEs
0
On KEV
0
New 30D
Products
CS9.8
Charx Sec-3000 Firmware
Phoenixcontact
29 CVEs0 on KEV0 new
CS9.8
Charx Sec-3050 Firmware
Phoenixcontact
29 CVEs0 on KEV0 new
CS9.8
Charx Sec-3100 Firmware
Phoenixcontact
29 CVEs0 on KEV0 new
CS9.8
Charx Sec-3150 Firmware
Phoenixcontact
29 CVEs0 on KEV0 new
FM9.1
FL Mguard Rs4004 Tx/dtx Firmware
Phoenixcontact
16 CVEs0 on KEV0 new
FM9.1
FL Mguard Rs4004 Tx/dtx Vpn Firmware
Phoenixcontact
16 CVEs0 on KEV0 new
FM8.8
FL Mguard Centerport Vpn-1000 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Core TX Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Core TX Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Delta Tx/tx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Delta Tx/tx Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Gt/gt Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Gt/gt Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Pci4000 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Pci4000 Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Pcie4000 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Pcie4000 Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs2000 Tx/tx-b Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs2000 Tx/tx Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs2005 TX Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs4000 Tx/tx-m Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs4000 Tx/tx-p Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Rs4000 Tx/tx Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Smart2 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FM8.8
FL Mguard Smart2 Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2116 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2204-2tc-2sfx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2fx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2fx SM Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2fx SM ST Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2fx ST Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2sfx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206-2sfx PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2206c-2fx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2207-fx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2207-fx SM Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2208 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2208 PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2208c Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2306-2sfp Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2306-2sfp PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2308 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2406-2sfx PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2408 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2408 PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2412-2tc-2sfx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2414-2sfx Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2414-2sfx PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2416 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2416 PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2504-2gc-2sfp Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2506-2sfp Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2506-2sfp/k1 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2506-2sfp PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2508 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2508/k1 Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
FS8.8
FL Switch 2508 PN Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
TM9.1
TC Mguard Rs4000 3g Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
TM9.1
TC Mguard Rs4000 4g Att Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
TM9.1
TC Mguard Rs4000 4g Vpn Firmware
Phoenixcontact
15 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-43384 | FM FL Mguard 2102 Firmware Phoenixcontact | 8.0 | May 7 | Phoenix Contact: Improper removal of sensitive information in MGUARD products |
| CVE-2025-41752 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… |
| CVE-2025-41751 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… |
| CVE-2025-41750 | FS FL Switch 2008f Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… |
| CVE-2025-41749 | FS FL Switch 2008f Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… |
| CVE-2025-41748 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to… |
| CVE-2025-41747 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… |
| CVE-2025-41746 | FS FL Switch 2406-2sfx PN Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… |
| CVE-2025-41745 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in… |
| CVE-2025-41697 | FS FL Switch 2406-2sfx Firmware Phoenixcontact | 6.8 | Dec 9 | An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g |
| CVE-2025-41696 | FS FL Switch 2708 PN Firmware Phoenixcontact | 4.6 | Dec 9 | An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the… |
| CVE-2025-41695 | FN FL Nat 2008 Firmware Phoenixcontact | 7.1 | Dec 9 | An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to… |
| CVE-2025-41694 | FS FL Switch 2708 PN Firmware Phoenixcontact | 6.5 | Dec 9 | A low privileged remote attacker can run the webshell with an empty command containing whitespace |
| CVE-2025-41693 | FS FL Switch 2708 PN Firmware Phoenixcontact | 4.3 | Dec 9 | A low privileged remote attacker can use the ssh feature to execute commands directly after login |
| CVE-2025-41692 | FS FL Switch 2414-2sfx Firmware Phoenixcontact | 6.8 | Dec 9 | A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation… |
| CVE-2025-25271 | CS Charx Sec-3000 Firmware Phoenixcontact | 8.8 | Jul 8 | An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface |
| CVE-2025-25270 | CS Charx Sec-3000 Firmware Phoenixcontact | 9.8 | Jul 8 | An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations |
| CVE-2025-25269 | CS Charx Sec-3000 Firmware Phoenixcontact | 8.4 | Jul 8 | An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation |
| CVE-2025-25268 | CS Charx Sec-3000 Firmware Phoenixcontact | 8.8 | Jul 8 | An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication |
| CVE-2025-24006 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.8 | Jul 8 | A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root |
| CVE-2025-24005 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.8 | Jul 8 | A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation |
| CVE-2025-24004 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.2 | Jul 8 | A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a… |
| CVE-2025-24003 | CS Charx Sec-3000 Firmware Phoenixcontact | 8.2 | Jul 8 | An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of… |
| CVE-2025-24002 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.3 | Jul 8 | An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service… |
| CVE-2024-43393 | FM FL Mguard Rs4000 Tx/tx Firmware Phoenixcontact | 8.1 | Sep 10 | Phoenix Contact: Configuration changes of the firewall services can lead to DoS in MGUARD devices |
| CVE-2024-43392 | FM FL Mguard Rs2005 TX Vpn Firmware Phoenixcontact | 8.1 | Sep 10 | Phoenix Contact: Firewall reconfiguration through the FW_environment variables in MGUARD devices |
| CVE-2024-43391 | FM FL Mguard 4102 Pci Firmware Phoenixcontact | 8.1 | Sep 10 | Phoenix Contact: Firewall reconfiguration through the FW_PORTFORWARDING.SRC_IP in MGUARD devices |
| CVE-2024-43390 | FM FL Mguard Rs4000 Tx/tx-m Firmware Phoenixcontact | 8.1 | Sep 10 | Phoenix Contact: Firewall reconfiguration due to improper input validation in MGUARD devices |
| CVE-2024-43389 | FM FL Mguard Rs4000 Tx/tx Firmware Phoenixcontact | 8.1 | Sep 10 | Phoenix Contact: OSPF reconfiguration due to improper input validation in MGUARD devices |
| CVE-2024-43388 | FM FL Mguard Smart2 Firmware Phoenixcontact | 8.8 | Sep 10 | Phoenix Contact: SNMP reconfiguration due to improper input validation in MGUARD devices |
| CVE-2024-43387 | FM FL Mguard Smart2 Firmware Phoenixcontact | 8.8 | Sep 10 | Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices |
| CVE-2024-43386 | FM FL Mguard Delta Tx/tx Vpn Firmware Phoenixcontact | 8.8 | Sep 10 | Phoenix Contact: OS command execution through EMAIL_NOTIFICATION.TO in mGuard devices. |
| CVE-2024-43385 | TM TC Mguard Rs4000 3g Vpn Firmware Phoenixcontact | 8.8 | Sep 10 | Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices |
| CVE-2024-7699 | TM TC Mguard Rs4000 4g Att Vpn Firmware Phoenixcontact | 8.8 | Sep 10 | Phoenix Contact: OS command execution in MGUARD products |
| CVE-2024-7698 | FM FL Mguard Pcie4000 Vpn Firmware Phoenixcontact | 5.7 | Sep 10 | Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products |
| CVE-2024-7734 | FM FL Mguard 2102 Firmware Phoenixcontact | 5.3 | Sep 10 | Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors. |
| CVE-2024-6788 | CS Charx Sec-3100 Firmware Phoenixcontact | 9.8 | Aug 13 | A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app”… |
| CVE-2024-3913 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.9 | Aug 13 | An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup |
| CVE-2024-28137 | CS Charx Sec-3150 Firmware Phoenixcontact | 7.8 | May 14 | A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability |
| CVE-2024-28136 | CS Charx Sec-3150 Firmware Phoenixcontact | 7.8 | May 14 | A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper input validation using the OCPP Remote service |
| CVE-2024-28135 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.0 | May 14 | A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to improper input validation |
| CVE-2024-28134 | CS Charx Sec-3150 Firmware Phoenixcontact | 7.0 | May 14 | An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to… |
| CVE-2024-28133 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.8 | May 14 | A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges |
| CVE-2024-26288 | CS Charx Sec-3150 Firmware Phoenixcontact | 8.7 | Mar 12 | An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM |
| CVE-2024-26005 | CS Charx Sec-3000 Firmware Phoenixcontact | 4.8 | Mar 12 | An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS |
| CVE-2024-26004 | CS Charx Sec-3050 Firmware Phoenixcontact | 7.5 | Mar 12 | An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality |
| CVE-2024-26003 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.5 | Mar 12 | An unauthenticated remote attacker can DoS the control agent due to a out-of-bounds read which may prevent or disrupt the charging functionality |
| CVE-2024-26002 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.8 | Mar 12 | An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files |
| CVE-2024-26001 | CS Charx Sec-3000 Firmware Phoenixcontact | 9.8 | Mar 12 | An unauthenticated remote attacker can write memory out of bounds due to improper input validation in the MQTT stack |
| CVE-2024-26000 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.5 | Mar 12 | An unauthenticated remote attacker can read memory out of bounds due to improper input validation in the MQTT stack. The brute force attack is not always successful because of… |
| CVE-2024-25999 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.8 | Mar 12 | An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service |
| CVE-2024-25998 | CS Charx Sec-3000 Firmware Phoenixcontact | 7.3 | Mar 12 | An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation |
| CVE-2024-25997 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.3 | Mar 12 | An unauthenticated remote attacker can perform a log injection due to improper input validation |
| CVE-2024-25996 | CS Charx Sec-3000 Firmware Phoenixcontact | 9.8 | Mar 12 | An unauthenticated remote attacker can perform a remote code execution due to an origin validation error |
| CVE-2024-25995 | CS Charx Sec-3000 Firmware Phoenixcontact | 9.8 | Mar 12 | An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation |
| CVE-2024-25994 | CS Charx Sec-3000 Firmware Phoenixcontact | 5.3 | Mar 12 | An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only |
| CVE-2023-5592 | MU Multiprog Phoenixcontact | 7.5 | Dec 14 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and… |
| CVE-2023-46144 | AF Axc F 1152 Firmware Phoenixcontact | 6.5 | Dec 14 | A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering… |
| CVE-2023-46143 | AS Automationworx Software Suite Phoenixcontact | 7.5 | Dec 14 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC |
| CVE-2023-46142 | AF Axc F 1152 Firmware Phoenixcontact | 8.8 | Dec 14 | A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with low privileges to gain full access on the affected devices |