ZDI-CAN-23330: ZDI-24-522: (Pwn2Own) Phoenix Contact CHARX SEC-3100 Filename Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2024-28135.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23330?
The severity of ZDI-CAN-23330 is high, as it allows network-adjacent attackers to execute arbitrary code.
How does one exploit ZDI-CAN-23330?
Exploitation of ZDI-CAN-23330 can occur by bypassing the existing authentication mechanism on affected Phoenix Contact CHARX SEC-3100 devices.
What devices are affected by ZDI-CAN-23330?
ZDI-CAN-23330 specifically affects Phoenix Contact CHARX SEC-3100 devices.
Is authentication required to exploit ZDI-CAN-23330?
Yes, authentication is required; however, it can be bypassed by attackers.
How can organizations protect against ZDI-CAN-23330?
Organizations can protect against ZDI-CAN-23330 by implementing security measures that strengthen the authentication process and regularly updating device firmware.