Phoenix Contact CHARX SEC-3xxx Charging Controllers Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Phoenix Contact CHARX SEC-3xxx charging controllers, specifically in versions through 1.6.5 and in the 1.7.2 version range. This vulnerability allows a local attacker with a user account to escalate privileges to root by exploiting a vulnerable script via SSH, due to improper input validation.

Impact

Exploitation of this vulnerability can lead to unauthorized privilege escalation, allowing a local user to gain root access on the affected device.

Remediation

Users are advised to upgrade to firmware version 1.7.3, which addresses this vulnerability. For general security recommendations, refer to the Phoenix Contact Application Note Security.