← CVE Intelligence

CVE-2024-25998

PHOENIX CONTACT: Command injection in the OCPP Service PUBLISHED

Description (CNA)

An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / CHARX SEC-3000affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3050affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3100affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3150affected 0 through 1.5.0

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.