SecAlerts
phoenix contact logo

phoenix contact

Security Risk Profile

63
/100
high

Security Risk Score

Comprehensive risk assessment based on 133 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 24, 2019 to present

133
Total CVEs
41
Critical+High
5
Exploited
38
Unpatched

Threat Assessment

Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
38
Critical/High
Risk Level
63/100
high
⚠️ 5 Active Exploits 6 Zero-Days🆕 19Fresh (<7d)📈 51 in Last 30 Days

Severity Distribution

Critical
2
High
39
Medium
5
Low
2

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
9

Age Distribution

Common Weaknesses (CWE)

1
Input Validation
5
2
Command Injection
3
3
Infoleak
1
4
Code Injection
1
5
Malicious File Upload
1

Most Affected Products

1. Phoenix Contact CHARX SEC-310043
2. Phoenix Contact CHARX SEC-315041
3. Phoenix Contact Automationworx25
4. Phoenixcontact Charx Sec-3000 Firmware13
5. Phoenixcontact Charx Sec-3050 Firmware13

Recent Vulnerabilities

See more →
ZDI-CAN-29076
unknown

ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

7/30/2026🔧 No Patch
ZDI-CAN-29094
unknown

ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-CAN-29077
unknown

ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-26-510
unknown

(Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-26-514
unknown

(Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

7/30/2026🔧 No Patch
ZDI-26-519
unknown

(Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-26-516
unknown

(Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

7/30/2026🔧 No Patch
ZDI-26-517
unknown

(Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-CAN-29054
unknown

ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability

7/30/2026🔧 No Patch
ZDI-CAN-28999
unknown

ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability

7/30/2026🔧 No Patch

Monitor phoenix contact in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

phoenix contact Security Vulnerabilities & Risk Score | 133 CVEs | SecAlerts - SecAlerts