phoenixcontact charx sec-3150 firmware

Name: phoenixcontact charx sec-3150 firmware
Brand: phoenixcontact

productUS

cpe:2.3:o:phoenixcontact:charx_sec-3150_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical2high0medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-25998US	—	1.47% (74th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-25995US	—OT elevated	1.40% (72nd)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-28135US	—	1.26% (70th)	—	no fix	2024-05-14	≤ 1.5.1
CVE-2024-26003US	—	1.16% (67th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-26004US	—	1.00% (63rd)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-26001US	critical9.8	0.87% (59th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-26000US	high7.5	0.81% (57th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2025-25270US	—	0.75% (55th)	—	1.7.3	2025-07-08	< 1.7.3
CVE-2024-28136US	—	0.75% (55th)	—	no fix	2024-05-14	≤ 1.5.1
CVE-2024-25994US	—	0.73% (54th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-25997US	—	0.69% (52nd)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-26005US	—	0.62% (50th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-3913US	—	0.51% (43rd)	—	1.6.3	2024-08-13	< 1.6.3
CVE-2024-6788US	critical9.8OT elevated	0.50% (43rd)	—	1.6.3	2024-08-13	< 1.6.3
CVE-2024-28134US	—OT elevated	0.49% (42nd)	—	no fix	2024-05-14	≤ 1.5.1
CVE-2025-24002US	—	0.43% (37th)	—	no fix	2025-07-08	≤ 1.6.5
CVE-2024-25999US	high7.8	0.41% (35th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2025-24003US	—	0.40% (34th)	—	no fix	2025-07-08	≤ 1.6.5
CVE-2024-25996US	critical9.8	0.39% (33rd)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-28133US	—	0.38% (32nd)	—	no fix	2024-05-14	≤ 1.5.1
CVE-2025-25268US	—OT elevated	0.36% (30th)	—	1.7.3	2025-07-08	< 1.7.3
CVE-2025-25271US	—OT elevated	0.35% (28th)	—	1.7.3	2025-07-08	< 1.7.3
CVE-2024-26288US	—OT elevated	0.31% (24th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2025-25269US	—	0.30% (22nd)	—	1.7.3	2025-07-08	< 1.7.3
CVE-2024-26002US	—	0.26% (18th)	—	1.5.1	2024-03-12	< 1.5.1
CVE-2024-28137US	—	0.25% (17th)	—	no fix	2024-05-14	≤ 1.5.1
CVE-2025-24004US	—	0.19% (9th)	—	no fix	2025-07-08	≤ 1.6.5
CVE-2025-24005US	—	0.14% (4th)	—	1.7.3	2025-07-08	< 1.7.3
CVE-2025-24006US	—	0.13% (3rd)	—	1.7.3	2025-07-08	< 1.7.3

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-1392Use of Default Credentials1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan