ZDI-CAN-23321: ZDI-24-855: (Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP Protocol Improper Log Output Neutralization Remote Code Execution Vulnerability
Published Jun 21, 2024
·Updated
This vulnerability allows network-adjacent attackers to injection malicious content into log files on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.1. The following CVEs are assigned: CVE-2024-25997.
Affected Software
1 affected component
Phoenix Contact CHARX SEC-3100
Event History
Jun 21, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-23321?
The severity of ZDI-CAN-23321 is rated at 3.1 according to the CVSS scoring system.
2
How can attackers exploit ZDI-CAN-23321?
Attackers can exploit ZDI-CAN-23321 by injecting malicious content into log files without requiring authentication.
3
What devices are affected by ZDI-CAN-23321?
ZDI-CAN-23321 affects Phoenix Contact CHARX SEC-3100 devices.
4
Is authentication required to exploit ZDI-CAN-23321?
No, authentication is not required to exploit ZDI-CAN-23321.
5
What type of attack is enabled by ZDI-CAN-23321?
ZDI-CAN-23321 enables network-adjacent attackers to perform log file injection attacks.