Phoenix Contact CHARX SEC-3xxx Charging Controllers Privilege Escalation Vulnerability

A vulnerability exists in Phoenix Contact CHARX SEC-3xxx charging controllers, all versions prior to 1.7.3. This vulnerability allows an unauthenticated local attacker to inject a command that is executed with root privileges, leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability results in unauthorized privilege escalation, allowing an attacker to execute commands as the root user.

Remediation

Users are advised to upgrade to firmware version 1.7.3, which addresses this vulnerability. For general security recommendations regarding network-enabled devices, consult the Phoenix Contact Application Note Security.