ZDI-24-523: Phoenix Contact CHARX SEC-3100 Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3100 charging controllers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-28137.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-523?
The severity of ZDI-24-523 is critical as it allows local privilege escalation on affected installations.
How do I fix ZDI-24-523?
To fix ZDI-24-523, update the Phoenix Contact CHARX SEC-3100 charging controllers to the latest firmware version provided by the vendor.
Who is affected by ZDI-24-523?
The ZDI-24-523 vulnerability affects installations of Phoenix Contact CHARX SEC-3100 charging controllers.
What type of vulnerability is ZDI-24-523?
ZDI-24-523 is a local privilege escalation vulnerability that requires low-privileged code execution for exploitation.
What are the potential impacts of ZDI-24-523?
The potential impacts of ZDI-24-523 include the ability for local attackers to gain elevated privileges on the affected system, compromising its security.