CVE-2024-28137 PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series

A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability...

CVE-2024-28137 PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series

A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability...

CVE-2024-28136 PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service

A local attacker with low privileges can use a command injection vulnerability to gain root privileges due to improper input validation using the OCPP Remote service...

CVE-2024-28135 PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series

A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected...

CVE-2024-28135 PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series

A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected...

CVE-2024-28134 PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series

An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...

CVE-2024-28134 PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series

An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as...

CVE-2024-28133 PHOENIX CONTACT: Privilege escalation in CHARX Series

A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges...

CVE-2024-28133 PHOENIX CONTACT: Privilege escalation in CHARX Series

A local low privileged attacker can use an untrusted search path in a CHARX system utility to gain root privileges...

PT-2024-22287 · Phoenix Contact · Charx Sec-3100

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3100 affected versions not specified Description: A local attacker with low privileges can perform a privilege escalation with an init script due to a Time-of-Check-to-Time-of-Use TOCTOU vulnerability. Recommendation...

Phoenix Technologies GeminiLake 安全漏洞

Phoenix Technologies GeminiLake is a low power processor product from Phoenix Technologies. A security vulnerability exists in Phoenix Technologies GeminiLake that stems from the presence of a buffer overflow vulnerability...

PHOENIX CONTACT CHARX SEC-3000 安全漏洞

PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT CHARX SEC-3000 version 1.5.1 and earlier, which originates from a low-privileged local attacker who can perform an elevation of privilege using an...

PHOENIX CONTACT CHARX SEC 命令注入漏洞

The PHOENIX CONTACT CHARX SEC is a series of AC charging controllers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in PHOENIX CONTACT CHARX SEC-3000 version 1.5.1 and prior versions, which could allow a remote attacker to execute remote code...

PT-2024-4256

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore versions 4.0.1.1 through 4.0.1.998 Phoenix SecureCore versions 4.1.0.1 through 4.1.0.562 Phoenix SecureCore versions 4.2.0.1 through 4.2.0.323 Phoenix SecureCore versions 4.2.1.1 through 4.2.1.287 Phoenix SecureCore version...

Phoenix SecureCore 安全漏洞

Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix, Germany. A security vulnerability exists in Phoenix SecureCore that originates from a buffer overflow...

PT-2024-18159 · Phoenix · Phoenix Securecore

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore for Intel Gemini Lake versions 4.1.0.1 through 4.1.0.566 Description: The issue is related to a potential buffer overflow in unsafe UEFI variable handling. Recommendations: For Phoenix SecureCore for Intel Gemini Lake...

PHOENIX CONTACT CHARX SEC-3000 代码问题漏洞

PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. A code issue vulnerability exists in PHOENIX CONTACT CHARX SEC-3000 version 1.5.1 and earlier, which originates from a local, low-privilege attacker who can use an untrusted search path to gain root...

PHOENIX CONTACT CHARX SEC 命令注入漏洞

PHOENIX CONTACT CHARX SEC is a series of AC charging controllers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in PHOENIX CONTACT CHARX SEC-3000 1.5.1 and earlier versions, which stems from incorrect input validation and allows a low-privileged local attacker to ga...

CE Phoenix Version 1.0.8.20 - Stored XSS

Exploit Title: CE Phoenix Version 1.0.8.20 - Stored XSS Date: 2023-11-25 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://phoenixcart.org/ Version: v3.0.1 Tested on: https://www.softaculous.com/apps/ecommerce/CEPhoenix POC: 1-Login admin panel , go to this url :...

CE Phoenix Version 1.0.8.20 - Stored XSS Vulnerability

Exploit Title: CE Phoenix Version 1.0.8.20 - Stored XSS Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://phoenixcart.org/ Version: v3.0.1 Tested on: https://www.softaculous.com/apps/ecommerce/CEPhoenix POC: 1-Login admin panel , go to this url :...