ZDI-CAN-29109: ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-44096.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-29109?
ZDI-CAN-29109 has a risk rating of 46, indicating a significant vulnerability.
How do I fix ZDI-CAN-29109?
To remediate ZDI-CAN-29109, apply the latest security patches provided by Phoenix Contact for the CHARX SEC-3150 devices.
What types of systems are affected by ZDI-CAN-29109?
ZDI-CAN-29109 affects installations of the Phoenix Contact CHARX SEC-3150 devices.
Who can exploit ZDI-CAN-29109?
Local attackers with the ability to execute low-privileged code can exploit ZDI-CAN-29109 to escalate privileges.
What is the impact of ZDI-CAN-29109?
Exploiting ZDI-CAN-29109 allows attackers to gain higher privileges on affected Phoenix Contact CHARX SEC-3150 devices.