NetSight
medium5.3

CVE-2024-25997

An unauthenticated remote attacker can perform a log injection due to improper input validation.

Impact

An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.

Affected products

VendorProductAffected versions
PhoenixcontactCharx Sec-3000 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3050 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3100 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3150 Firmware
before 1.5.1

Weakness classification

References