CVE-2024-25999
PHOENIX CONTACT: Privilege escalation in the OCPP agent service
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service.
Un atacante local no autenticado puede realizar una escalada de privilegios debido a una validaciĆ³n de entrada incorrecta en el servicio del agente OCPP.
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3100 charging controllers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the charx_pack_logs script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2024-02-14 CVE Reserved
- 2024-03-12 CVE Published
- 2024-06-24 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
URL | Tag | Source |
---|---|---|
https://cert.vde.com/en/advisories/VDE-2024-011 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
PHOENIX CONTACT Search vendor "PHOENIX CONTACT" | CHARX SEC-3000 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3000" | <= 1.5.0 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3000" and version " <= 1.5.0" | en |
Affected
| ||||||
PHOENIX CONTACT Search vendor "PHOENIX CONTACT" | CHARX SEC-3050 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3050" | <= 1.5.0 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3050" and version " <= 1.5.0" | en |
Affected
| ||||||
PHOENIX CONTACT Search vendor "PHOENIX CONTACT" | CHARX SEC-3100 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3100" | <= 1.5.0 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3100" and version " <= 1.5.0" | en |
Affected
| ||||||
PHOENIX CONTACT Search vendor "PHOENIX CONTACT" | CHARX SEC-3150 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3150" | <= 1.5.0 Search vendor "PHOENIX CONTACT" for product "CHARX SEC-3150" and version " <= 1.5.0" | en |
Affected
|