high8.6
CVE-2024-6788
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileg…
Impact
A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoenixcontact | Charx Sec-3000 Firmware | before 1.6.3 |
| Phoenixcontact | Charx Sec-3050 Firmware | before 1.6.3 |
| Phoenixcontact | Charx Sec-3100 Firmware | before 1.6.3 |
| Phoenixcontact | Charx Sec-3150 Firmware | before 1.6.3 |