← CVE Intelligence

CVE-2024-28136

PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service PUBLISHED

Description (CNA)

A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper input validation using the OCPP Remote service.

Affected (CNA)

Vendor / productVersions
PHOENIX CONTACT / CHARX SEC-3000affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3050affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3100affected 0 through 1.5.1
PHOENIX CONTACT / CHARX SEC-3150affected 0 through 1.5.1

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.