NetSight
high8.4

CVE-2024-25999

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.

Impact

An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service. 

Affected products

VendorProductAffected versions
PhoenixcontactCharx Sec-3000 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3050 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3100 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3150 Firmware
before 1.5.1

Weakness classification

References