NetSight
high7.8

CVE-2024-26002

An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.

Impact

An improper input validation in the Qualcom plctool allows a local attacker with low privileges to gain root access by changing the ownership of specific files.

Affected products

VendorProductAffected versions
PhoenixcontactCharx Sec-3000 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3050 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3100 Firmware
before 1.5.1
PhoenixcontactCharx Sec-3150 Firmware
before 1.5.1

Weakness classification

References