PHOENIX CONTACT FL/TC MGUARD 代码注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A code injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD that originates from improper input validation, which allows a low-privileged remote attacker with write access to reconfigure the SNMP...

PHOENIX CONTACT FL/TC MGUARD 安全漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD. A remote attacker with low privileges could access the CSRF tokens of highly privileged users, which could be misused to launch CSRF attacks...

PHOENIX CONTACT FL/TC MGUARD 操作系统命令注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. An operating system command injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD, which stems from improper neutralization of a special element in the variable EMAILRELAYPASSWORD in the mGuard...

PHOENIX CONTACT FL/TC MGUARD 代码注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A code injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD. A low-privileged remote attacker can perform configuration changes to firewall services, including packet filtering, packet forwarding,...

PT-2024-30553 · Phoenix Contact · Fl Mguard 2102 +41

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A low-privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, network access...

PHOENIX CONTACT FL/TC MGUARD 代码注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A code injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD. A low-privileged remote attacker can execute configuration changes to the ospf service via the OSPFINTERFACE.SIMPLEKEY,...

PHOENIX CONTACT FL MGUARD 安全漏洞

The PHOENIX CONTACT FL MGUARD is a series of routers from PHOENIX CONTACT, Germany. A security vulnerability exists in Phoenix Contact FL MGUARD versions prior to 2102 10.4.1 that originates from the behavior of an unauthenticated, remote attacker who can exploit the pathfinder TCP encapsulation...

PT-2024-30549

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A low privileged remote attacker can perform configuration changes of the ospf service through OSPF INTERFACE.SIMPLE KEY and OSPF INTERFACE.DIGEST KEY...

Malicious code in phoenix_3_showcontroller_crack___exclusive___cocaine_gk9mr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01cc981fc03954cf64b70bbcd7e9d121d6c99aa82ccf3695bf537e2a19847e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Phoenix Contact CHARX SEC-3100 Improper Access Control Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firewall. The issue results from incorrect ordering...

CVE-2024-6788 Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password...

CVE-2024-3913 Phoenix Contact: Start sequence allows attack during the boot process

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup...

CVE-2024-3913 Phoenix Contact: Start sequence allows attack during the boot process

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup...

PT-2024-28357 · Phoenix Contact · Charx Sec-3100

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3100 affected versions not specified Description: An unauthenticated remote attacker can use this issue to change the device configuration due to a file being writeable for a short time after system startup...

PHOENIX CONTACT CHARX SEC 安全漏洞

PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in PHOENIX CONTACT CHARX SEC. An attacker could use the firmware update function on the LAN interface of the device to reset the password of the user with low privileges...

CVE-2024-41951 PheonixAppAPI has visible Encoding Maps

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 plctool Improper Privilege Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3100 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 OCPP Protocol Missing Encryption Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the OCPP protocol. The issue...

(Pwn2Own) Phoenix Contact CHARX SEC-3100 ClientSession Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of ClientSession objects in the...

The vulnerability of the Trusted Platform Module (TPM) subsystem of the Phoenix SecureCore UEFI processor software from Intel allows a hacker to execute arbitrary code.

The vulnerability of the Trusted Platform Module TPM subsystem of the Phoenix SecureCore UEFI processor software from Intel is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code...