VDE-2024-022

csafDEphoenix_contact_psirt

Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers

view advisory published 2024-08-13

Start sequence for firewall service allows attack during the boot process. Password is reset to default when the device undergoes a firmware upgrade.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-6788UScritical9.8OT elevated—
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to…
CVE-2024-3913US——
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Fixed

    Phoenix Contact strongly recommends upgrading affected charge controllers to firmware version 1.6.3 or higher which fixes these vulnerabilities.

  • Fixed

    Phoenix Contact strongly recommends upgrading affected charge controllers to firmware version 1.6.3 or higher which fixes these vulnerabilities.

  • Workaround

    Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to General Recommendation.

  • Workaround

    Phoenix Contact recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to General Recommendation.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan