ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-44093.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-511?
The severity of ZDI-26-511 is rated at 46, indicating a significant risk for local privilege escalation.
How do I fix ZDI-26-511?
To fix ZDI-26-511, ensure that your Phoenix Contact CHARX SEC-3150 device firmware is updated to the latest version provided by the vendor.
Who is affected by ZDI-26-511?
ZDI-26-511 affects installations of the Phoenix Contact CHARX SEC-3150 device that are running vulnerable firmware.
What type of vulnerability is ZDI-26-511?
ZDI-26-511 is categorized as a local privilege escalation vulnerability due to symlink following.
What are the prerequisites for exploiting ZDI-26-511?
An attacker must have the ability to execute low-privileged code on the target system to exploit ZDI-26-511.