← CVE Intelligence

CVE-2024-28135

PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series PUBLISHED

Description (CNA)

A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / CHARX SEC-3000affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3050affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3100affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3150affected 0 through 1.5.1

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.