CVE-2024-25998 PHOENIX CONTACT: Command injection in the OCPP Service

An unauthenticated remote attacker can perform a command injection in the OCPP Service with limited privileges due to improper input validation...

CVE-2024-25998

Phoenix Contact CHARX SEC vulnerable to command injection in the OCPP Service due to improper input validation. Affected: CHARX SEC-3000 (and CHARX SEC-3100 per related advisories) with versions prior to v1.5.1. Impact: unauthenticated, remote attacker can potentially execute arbitrary code on af...