Description (CNA)
A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Phoenix Contact / CHARX SEC-3150 | affected 1.0.0 before 1.9.1 |
| Phoenix Contact / CHARX SEC-3100 | affected 1.0.0 before 1.9.1 |
| Phoenix Contact / CHARX SEC-3050 | affected 1.0.0 before 1.9.1 |
| Phoenix Contact / CHARX SEC-3000 | affected 1.0.0 before 1.9.1 |
CWE
CWE-749
References
ADP enrichment
No English description supplied.
No references supplied.