CVE-2024-3913

🗓️ 13 Aug 2024 12:30:33Reported by CERTVDEType

Vulnerability allows unauthenticated remote attacker to change device configuration

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-3913	13 Aug 202416:16	–	circl
CNNVD	PHOENIX CONTACT CHARX SEC 安全漏洞	13 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-3913 Phoenix Contact: Start sequence allows attack during the boot process	13 Aug 202412:30	–	cvelist
EUVD	EUVD-2024-32481	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3913	13 Aug 202413:15	–	nvd
OSV	CVE-2024-3913	13 Aug 202413:15	–	osv
Positive Technologies	PT-2024-28357 · Phoenix Contact · Charx Sec-3100	13 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3913	23 May 202508:34	–	redhatcve
Vulnrichment	CVE-2024-3913 Phoenix Contact: Start sequence allows attack during the boot process	13 Aug 202412:30	–	vulnrichment
Zero Day Initiative	Phoenix Contact CHARX SEC-3100 Improper Access Control Authentication Bypass Vulnerability	20 Aug 202400:00	–	zdi

NVD

Vulners

Vulnrichment

Node

phoenixcontact charx_sec-3150_firmwareRange<1.6.3

AND

phoenixcontact charx_sec-3150Match-

Node

phoenixcontact charx_sec-3100_firmwareRange<1.6.3

AND

phoenixcontact charx_sec-3100Match-

Node

phoenixcontact charx_sec-3050_firmwareRange<1.6.3

AND

phoenixcontact charx_sec-3050Match-

Node

phoenixcontact charx_sec-3000_firmwareRange<1.6.3

AND

phoenixcontact charx_sec-3000Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3000 (1139022)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3050 (1139018)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3100 (1139012)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CHARX SEC-3150 (1139012)",
    "vendor": "Phoenix Contact",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2024-022

29 Jan 2025 06:15Current

7.6High risk

Vulners AI Score7.6

CVSS 3.15.3 - 5.9

EPSS0.002

SSVC

CWE-552