CVE-2024-26005

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3100 (affected versions not specified)

Description: The issue is related to an incomplete cleanup during service restart after a Denial of Service (DoS), allowing an unauthenticated remote attacker to gain service level privileges. This can also lead to remote code execution due to a use-after-free vulnerability in the ClientSession.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.