NetSight
high7.8

CVE-2024-28137

A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability.

Impact

A local attacker with low privileges can perform a privilege escalation with an init script due to a TOCTOU vulnerability.

Affected products

VendorProductAffected versions
PhoenixcontactCharx Sec-3000 Firmware
through 1.5.1
PhoenixcontactCharx Sec-3050 Firmware
through 1.5.1
PhoenixcontactCharx Sec-3100 Firmware
through 1.5.1
PhoenixcontactCharx Sec-3150 Firmware
through 1.5.1

Weakness classification

References