PT-2023-9670

CVE-2024-25999

Publicado

2023-12-06

Atualizado

2024-06-21

Descrição por

CVSS 3.1

8.4

Alta

MétricasAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3100 (affected versions not specified)

Description An unauthenticated local attacker can perform a privilege escalation due to improper input validation in the OCPP agent service. This issue exists because of insufficient input validation, which may allow an attacker to elevate their privileges and execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Chris Anastasio

Fabius Watson

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-20: Improper Input Validation

Identificadores relacionados

CVE-2024-25999

BDU:2024-09585