← CVE Intelligence

CVE-2024-25994

PHOENIX CONTACT: Unintended script file upload in CHARX Series PUBLISHED

Description (CNA)

An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / CHARX SEC-3000affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3050affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3100affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3150affected 0 through 1.5.0

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.