CVE-2024-25998

🗓️ 12 Mar 2024 08:11:31Reported by CERTVDEType

An unauthenticated remote attacker can perform a command injection in the OCPP Service

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the OCPP microprogramming software for modular control devices for DC charging stations and wall-mounted charging devices from Phoenix Contact CHARX SEC-3100 allows a intruder to execute arbitrary commands.	15 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-25998	12 Mar 202410:26	–	circl
CNNVD	PHOENIX CONTACT CHARX SEC Command Injection Vulnerability	12 Mar 202400:00	–	cnnvd
Cvelist	CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service	12 Mar 202408:11	–	cvelist
EUVD	EUVD-2024-23294	3 Oct 202520:07	–	euvd
NVD	CVE-2024-25998	12 Mar 202409:15	–	nvd
OSV	CVE-2024-25998	12 Mar 202409:15	–	osv
Prion	Command injection	12 Mar 202409:15	–	prion
Positive Technologies	PT-2024-8066 · Phoenix Contact · Charx Sec-3100	2 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-25998	5 Feb 202513:06	–	redhatcve

NVD

Vulners

Vulnrichment

Node

phoenixcontact charx_sec-3000_firmwareRange<1.5.1

AND

phoenixcontact charx_sec-3000Match-

Node

phoenixcontact charx_sec-3050_firmwareRange<1.5.1

AND

phoenixcontact charx_sec-3050Match-

Node

phoenixcontact charx_sec-3100_firmwareRange<1.5.1

AND

phoenixcontact charx_sec-3100Match-

Node

phoenixcontact charx_sec-3150_firmwareRange<1.5.1

AND

phoenixcontact charx_sec-3150Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3000",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3050",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3100",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3150",
    "vendor": "PHOENIX CONTACT",
    "versions": [
      {
        "lessThanOrEqual": "1.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2024-011

24 Jan 2025 07:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.3

EPSS0.00508

SSVC

CWE-77