(Pwn2Own) Phoenix Contact CHARX SEC-3100 CANopenDevice Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Phoenix Contact CHARX SEC-3100 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of CANopenDevice objects. Th...

PT-2024-21276

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3100 CANopenDevice affected versions not specified Description An unauthenticated remote attacker can disrupt the charging functionality by causing a denial-of-service DoS in the control agent due to access of an...