CVE-2024-3913 — Phoenix Contact: Start sequence allows attack during the boot process

CVE-2024-3913

Phoenix Contact: Start sequence allows attack during the boot process PUBLISHED

Description (CNA)

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.

Affected (CNA)

Vendor / product	Versions
Phoenix Contact / CHARX SEC-3000 (1139022)	affected 0.0.0 before 1.7.0
Phoenix Contact / CHARX SEC-3050 (1139018)	affected 0.0.0 before 1.7.0
Phoenix Contact / CHARX SEC-3100 (1139012)	affected 0.0.0 before 1.7.0
Phoenix Contact / CHARX SEC-3150 (1139012)	affected 0.0.0 before 1.7.0

CWE

CWE-552

References

https://cert.vde.com/en/advisories/VDE-2024-022

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.