Lucene search
CERTVDECVELIST:CVE-2024-3913HistoryAug 13, 2024 - 12:30 p.m.
CVE-2024-3913 Phoenix Contact: Start sequence allows attack during the boot process
2024-08-1312:30:33
CWE-552
CERTVDE
www.cve.org
2
cve-2024-3913
phoenix contact
start sequence
attack
boot process
unauthenticated
remote attacker
vulnerability
device configuration
file writeable
system startup
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
18.7%
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "CHARX SEC-3000 (1139022)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.0",
"status": "affected",
"version": "0.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CHARX SEC-3050 (1139018)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.0",
"status": "affected",
"version": "0.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CHARX SEC-3100 (1139012)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.0",
"status": "affected",
"version": "0.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CHARX SEC-3150 (1139012)",
"vendor": "Phoenix Contact",
"versions": [
{
"lessThan": "1.7.0",
"status": "affected",
"version": "0.0.0",
"versionType": "semver"
}
]
}
]References
Related
vulnrichment
vulnrichment
cve
cve
CVE-2024-3913
2024-08-13 13:15:12
nvd
nvd
CVE-2024-3913
2024-08-13 13:15:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
18.7%
Related for CVELIST:CVE-2024-3913