← CVE Intelligence

CVE-2024-26002

PHOENIX CONTACT: File ownership manipulation in CHARX Series PUBLISHED

Description (CNA)

An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / CHARX SEC-3000affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3050affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3100affected 0 through 1.5.0
PHOENIX CONTACT / CHARX SEC-3150affected 0 through 1.5.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.