Description (CNA)
It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phoenix Contact / CHARX SEC-3150 | affected 1.0.0 before 1.9.0 |
| Phoenix Contact / CHARX SEC-3100 | affected 1.0.0 before 1.9.0 |
| Phoenix Contact / CHARX SEC-3050 | affected 1.0.0 before 1.9.0 |
| Phoenix Contact / CHARX SEC-3000 | affected 1.0.0 before 1.9.0 |
CWE
CWE-200
References
- https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-060.json
- https://certvde.com/de/advisories/VDE-2026-060/
ADP enrichment
No English description supplied.
No references supplied.