CVE-2024-3913mediumCWE-552

CVE-2024-3913: medium-severity vulnerability in Phoenix Contact CHARX SEC-3000 (1139022)

Phoenix Contact: Start sequence allows attack during the boot process

Published · Updated

Follow this CVE+ Monitor CHARX SEC-3000+ Monitor CHARX SEC-3050

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.5%
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Phoenix Contact · CHARX SEC-3000 (1139022)Phoenix Contact · CHARX SEC-3050 (1139018)Phoenix Contact · CHARX SEC-3100 (1139012)Phoenix Contact · CHARX SEC-3150 (1139012)